telnyx-messaging-javascript
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill enables an agent to process text content from external messaging services, which introduces a surface for indirect prompt injection.
- Ingestion points: Message body parameters in
client.messages.sendand text fields in inbound message webhook payloads defined inSKILL.md. - Boundary markers: No delimiters or instructions are provided to the agent to ignore potentially malicious commands embedded in message data.
- Capability inventory: The skill performs network operations to send messages, manage messaging profiles, and regenerate secrets via the
telnyxSDK as detailed inSKILL.mdandreferences/api-details.md. - Sanitization: No sanitization or content validation logic is implemented for message text in the provided examples.
Audit Metadata