telnyx-voice-streaming-python
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains official API documentation and implementation examples for the Telnyx Python SDK, provided by the service vendor.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the 'telnyx' Python package, which is the legitimate SDK for the Telnyx platform.
- [CREDENTIALS_UNSAFE]: The implementation examples correctly demonstrate retrieving API keys from environment variables rather than hardcoding sensitive credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an interface for receiving real-time call transcriptions, which constitutes an ingestion point for untrusted external data.
- Ingestion points: 'transcription' webhook payload containing speech-to-text data.
- Boundary markers: None implemented in the basic documentation examples.
- Capability inventory: API calls to start/stop call forking, streaming, and transcription.
- Sanitization: Verification of webhook signatures is demonstrated, though content-level sanitization of transcripts is left to the developer implementation.
Audit Metadata