telnyx-vercel-sms
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
vercelCLI globally and thetelnyxNode.js package for project implementation. These are official tools from a well-known service and the skill's vendor respectively. - [COMMAND_EXECUTION]: The documentation provides multiple
vercelCLI commands to manage project links, integration discovery, and environment variable synchronization. It also provides acurltemplate for testing message transmission via the Telnyx API. - [INDIRECT_PROMPT_INJECTION]: The skill documents an inbound webhook handler that processes the content of incoming SMS messages (
data.payload.text). This constitutes an attack surface where untrusted external data enters the application context. However, the skill explicitly provides implementation details for Ed25519 signature verification usingTELNYX_PUBLIC_KEYto ensure the authenticity of the incoming data.
Audit Metadata