telnyx-voice-streaming-javascript

Pass

Audited by Gen Agent Trust Hub on Mar 23, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious behavior, obfuscation, or unauthorized access patterns were detected. The skill provides standard documentation for the Telnyx Voice Streaming JavaScript SDK and correctly recommends using environment variables for secret management.
  • [PROMPT_INJECTION]: The skill documents the handling of external webhook events, creating a surface for potential indirect prompt injection.
  • Ingestion points: Webhook payloads processed in the /webhooks handler example in SKILL.md.
  • Boundary markers: None present in the provided snippets.
  • Capability inventory: The skill defines methods for forking, streaming, and transcribing calls via the telnyx client in SKILL.md.
  • Sanitization: The skill provides an example of Ed25519 signature verification using client.webhooks.unwrap() to ensure data authenticity.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 23, 2026, 06:35 PM