telnyx-ai-assistants-curl
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform HTTP requests to the Telnyx API atapi.telnyx.com. These commands are used to manage the lifecycle of AI assistants and interact with them during runtime. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing untrusted instructions and user messages.
- Ingestion points: The
instructionsparameter in theCreate an assistantandUpdate an assistantoperations, as well as the messagecontentin theChat with an assistantoperation (SKILL.md). - Boundary markers: Absent; the skill does not define delimiters or provide warnings to the agent to disregard embedded commands in the processed data.
- Capability inventory: The skill can create, update, and delete AI assistants, tools, and MCP servers via API calls (SKILL.md).
- Sanitization: Absent; the skill does not implement validation or escaping of the ingested instructions or chat content before inclusion in the API request body.
Audit Metadata