telnyx-voice-java
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content for integrating with the Telnyx Voice API using their official Java SDK. All external resources, including the Maven/Gradle dependency
com.telnyx.sdk:telnyx-javaand various API endpoints, are owned by the vendor 'team-telnyx'. - [DATA_EXPOSURE_&_EXFILTRATION]: No hardcoded credentials were found. The setup instructions correctly advise using
TelnyxOkHttpClient.fromEnv()to load credentials from the environment, which is a secure practice. Webhook handling examples include robust Ed25519 signature verification usingclient.webhooks().unwrap(), preventing unauthorized data ingestion. - [REMOTE_CODE_EXECUTION]: The skill does not perform any remote script downloads or arbitrary command execution. It relies on a versioned, standard SDK from a known repository.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external webhook data, it provides specific guidance on signature verification and structured parsing, which mitigates the risk of processing malicious payloads.
Audit Metadata