telnyx-voice-ruby
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external call events and webhooks.
- Ingestion points: Webhook payloads defined in SKILL.md and references/api-details.md, specifically fields like
client_state,sip_headers, and caller information (from/tonumbers). - Boundary markers: The skill includes instructions for signature verification of webhooks but lacks specific delimiters or instructions for the agent to ignore embedded commands within the data content itself.
- Capability inventory: The skill performs network operations via the Telnyx API and processes incoming network data via webhook endpoints.
- Sanitization: Webhook signatures are verified for authenticity, but the text content within the payload is not explicitly sanitized or escaped before being presented to the agent's context.
Audit Metadata