telnyx-ai-assistants-python
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs users to install the
telnyxPython package viapip install telnyx. This is a standard installation procedure for the official SDK. - [EXTERNAL_DOWNLOADS]: The skill facilitates communication with Telnyx's official API endpoints to manage AI resources and services. These interactions are consistent with the skill's stated purpose.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it accepts natural language input for assistant instructions and chat content. 1. Ingestion points: The
instructionsparameter inclient.ai.assistants.create()and thecontentparameter inclient.ai.assistants.chat()(SKILL.md). 2. Boundary markers: No specific delimiters or warnings for the agent are defined to separate user input from system instructions. 3. Capability inventory: The skill has extensive capabilities to create and modify cloud resources via its API, including webhooks and MCP servers. 4. Sanitization: The skill does not implement client-side sanitization of inputs before passing them to the SDK methods.
Audit Metadata