telnyx-oauth-curl
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were detected. The skill's behavior is consistent with its stated purpose of providing API interaction examples.
- [COMMAND_EXECUTION]: The skill includes shell command examples using
curl,echo,tail, andsed. These are standard tools used for making API requests and processing text output in a development environment. - [CREDENTIALS_UNSAFE]: The skill uses the placeholder
YOUR_API_KEY_HEREfor theTELNYX_API_KEYenvironment variable. This is a safe practice that prevents the exposure of actual secrets. - [DATA_EXFILTRATION]: All network operations are directed to
api.telnyx.com. This domain is the official API endpoint for Telnyx and is associated with the skill author 'team-telnyx'. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates capturing and printing API response bodies (e.g., in the Error Handling section). While this constitutes an ingestion point for untrusted external data, the risk is negligible as the data is only used for local display in the provided examples and the skill does not instruct the agent to interpret these responses as further commands.
Audit Metadata