telnyx-oauth-curl

Pass

Audited by Gen Agent Trust Hub on Mar 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were detected. The skill's behavior is consistent with its stated purpose of providing API interaction examples.
  • [COMMAND_EXECUTION]: The skill includes shell command examples using curl, echo, tail, and sed. These are standard tools used for making API requests and processing text output in a development environment.
  • [CREDENTIALS_UNSAFE]: The skill uses the placeholder YOUR_API_KEY_HERE for the TELNYX_API_KEY environment variable. This is a safe practice that prevents the exposure of actual secrets.
  • [DATA_EXFILTRATION]: All network operations are directed to api.telnyx.com. This domain is the official API endpoint for Telnyx and is associated with the skill author 'team-telnyx'.
  • [INDIRECT_PROMPT_INJECTION]: The skill demonstrates capturing and printing API response bodies (e.g., in the Error Handling section). While this constitutes an ingestion point for untrusted external data, the risk is negligible as the data is only used for local display in the provided examples and the skill does not instruct the agent to interpret these responses as further commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 26, 2026, 05:52 PM
Security Audit — agent-trust-hub — telnyx-oauth-curl