telnyx-ai-inference-javascript
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the official
telnyxNPM package for API interactions, which is the standard SDK for the service described. This is a legitimate and expected dependency for this skill's functionality. - [CREDENTIALS_SAFE]: The code snippets correctly demonstrate the use of environment variables (
process.env['TELNYX_API_KEY']) for authentication rather than hardcoding sensitive credentials, following industry security best practices. - [DATA_EXPOSURE]: Network operations are directed at the official Telnyx API domain (
api.telnyx.com) for legitimate inference, embedding, and analytics tasks. No unauthorized or suspicious data exfiltration patterns were identified. - [COMMAND_EXECUTION]: The provided examples are limited to high-level SDK method calls. There is no evidence of arbitrary command execution, risky shell subprocesses, or system-level privilege escalation.
- [PROMPT_INJECTION]: While the skill interacts with LLM endpoints that process external content (such as URL crawling or chat completions), it does not include instructions designed to override safety filters or bypass the underlying model's behavioral guidelines.
Audit Metadata