telnyx-sip-integrations-javascript
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation provides standard setup instructions using the shell command
npm install telnyxto install the official vendor SDK. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of the
telnyxpackage from the official NPM registry and includes examples of uploading media files from remote URLs (e.g.,http://www.example.com/audio.mp3). - [DATA_EXFILTRATION]: The skill provides tools for managing sensitive integration data, such as cloud storage credentials (GCS, S3, Azure) and Dialogflow service account private keys. This is the core intended functionality for configuring SIP integrations and involves transmission to the vendor's own API.
- [SAFE]: Demonstrates secure credential management practices by instructing users to retrieve sensitive API keys from environment variables (
process.env['TELNYX_API_KEY']) rather than hardcoding them in the source code.
Audit Metadata