voice-call
Pass
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION] (LOW): The skill exposes actions that send text messages to voice synthesis engines.
- Ingestion points: The
messageparameter ininitiate_call,continue_call, andspeak_to_userinSKILL.md. - Boundary markers: Absent. There are no instructions to the agent to treat input as untrusted data or use delimiters.
- Capability inventory: Outbound voice communication via Twilio, Telnyx, and Plivo.
- Sanitization: Absent. The skill does not define any filtering or escaping for the
messagecontent. - [CREDENTIALS_UNSAFE] (SAFE): While the skill documents configuration keys like
authTokenandapiKey, no actual secrets are hardcoded in the file.
Audit Metadata