telnyx-messaging-java
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes inbound SMS and MMS content received through webhooks, creating a surface for indirect prompt injection. Malicious instructions embedded in received messages could attempt to influence the agent's logic when it parses or responds to the content. * Ingestion points: The webhook verification handler in SKILL.md and the inboundMessage event schema in references/api-details.md. * Boundary markers: No explicit boundary markers or instructions to treat received text as untrusted data are provided. * Capability inventory: The skill can send messages, schedule delivery, and manage messaging profiles using the com.telnyx.sdk library. * Sanitization: No sanitization or validation steps for inbound message text are described in the instructions.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the official Telnyx Java SDK (com.telnyx.sdk:telnyx:6.36.0) as its primary dependency for executing messaging operations.
Audit Metadata