telnyx-vercel-sms
Warn
Audited by Snyk on Nov 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow handles inbound SMS webhooks containing external user-submitted message text, which the application/agent can ingest.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill integrates Telnyx US SMS and messaging capabilities into Vercel projects. It describes sending SMS messages via the Telnyx API using cURL or a Next.js application (Direct operation: sending messages/purchasing credit), but explicitly notes that purchasing credit and payment terms must be handled by a human user in the browser ("A person has to do two things. Accept the terms and pay for credit in Vercel... You cannot do either for them"). Therefore, no direct financial execution is performed by the agent without human intervention/approval.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata