telnyx-voice-python
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official
telnyxPython SDK from the public package registry. - [SAFE]: Recommends secure handling of API credentials through environment variables, avoiding hardcoded secrets in the code.
- [SAFE]: Provides a secure implementation for webhook handling, including cryptographic signature verification using Ed25519 to ensure the integrity and authenticity of external events.
- [PROMPT_INJECTION]: The skill defines a surface area for processing untrusted data via webhook events, which could lead to indirect prompt injection.
- Ingestion points: The webhook handler implementation in
SKILL.mdprocesses data from external HTTP POST requests. - Boundary markers: Not explicitly defined for the interpretation of internal payload fields.
- Capability inventory: The skill allows the agent to issue call control commands such as dial, bridge, and transfer.
- Sanitization: Employs the
client.webhooks.unwrapmethod for cryptographic verification of the webhook source before processing.
Audit Metadata