telnyx-whatsapp-javascript
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for API integrations, such as sourcing API keys from environment variables to prevent credential exposure.
- [SAFE]: It implements robust security measures for webhooks, specifically using Ed25519 signature verification to ensure the authenticity and integrity of incoming event data.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration techniques were detected. External dependencies and API operations are limited to the official Telnyx SDK and services.
- [SAFE]: Indirect Prompt Injection Surface Analysis: Ingestion points include message body text and template parameters (SKILL.md). Boundary markers are absent in the examples. Capability inventory includes network operations via the
telnyxSDK (SKILL.md). Sanitization is not explicitly defined. This ingestion surface is fundamental to the messaging functionality and is considered safe in the context of a communication API.
Audit Metadata