telnyx-voice-advanced-go
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the official Telnyx Go SDK from the vendor's GitHub repository (
github.com/team-telnyx/telnyx-go). - [CREDENTIALS_UNSAFE]: Code examples demonstrate secure credential management by retrieving the API key from environment variables (
os.Getenv("TELNYX_API_KEY")) rather than hardcoding sensitive strings. - [PROMPT_INJECTION]: The skill processes external data via webhooks (e.g.,
callConversationInsightsGeneratedandcallDtmfReceived), which constitutes an indirect prompt injection surface. - Ingestion points: Webhook payloads described in
SKILL.md(e.g., conversation results, DTMF digits). - Boundary markers: Not explicitly defined in code snippets.
- Capability inventory: Call control operations including DTMF transmission, SIPREC recording control, and supervisor role switching.
- Sanitization: The skill includes robust examples for verifying webhook authenticity using Ed25519 signatures and timestamps before processing data.
- [COMMAND_EXECUTION]: No suspicious or arbitrary command execution patterns were identified; the provided Go snippets perform standard API interactions using the vendor library.
Audit Metadata