telnyx-webrtc-java
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the com.telnyx.sdk:telnyx package (version 6.36.0) via Maven and Gradle. This is an official SDK from a recognized vendor.
- [CREDENTIALS_UNSAFE]: The skill includes code examples containing truncated, non-functional placeholders for certificates and private keys. It also correctly recommends initializing the client from environment variables (TelnyxOkHttpClient.fromEnv()) rather than hardcoding secrets.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and displays data from external API endpoints (e.g., /mobile_push_credentials, /telephony_credentials).
- Ingestion points: API response objects returned by the SDK methods in SKILL.md.
- Boundary markers: None present.
- Capability inventory: The skill allows for list, retrieve, create, and delete operations on telephony and push credentials.
- Sanitization: None explicitly defined for API response content.
Audit Metadata