telnyx-api
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill contains high-quality documentation and templates for legitimate API integration.
- [DATA_EXFILTRATION]: Code examples correctly use environment variables for sensitive credentials (e.g.,
process.env.TELNYX_API_KEY) and provide clear guidance on securing API keys. No unauthorized network transmissions or sensitive file access patterns were found. - [EXTERNAL_DOWNLOADS]: All external references point to official package registries or the verified GitHub repositories of the well-known service (Telnyx). No risky downloads from untrusted sources or paste sites are present.
- [INDIRECT_PROMPT_INJECTION]: While the skill facilitates the processing of incoming SMS/MMS messages (untrusted data), it includes detailed security patterns for verifying webhook signatures and implementing database idempotency to prevent duplicate processing attacks. These patterns represent industry-standard mitigations.
Audit Metadata