telnyx-voice-streaming-javascript
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious behavior, obfuscation, or unauthorized access patterns were detected. The skill provides standard documentation for the Telnyx Voice Streaming JavaScript SDK and correctly recommends using environment variables for secret management.
- [PROMPT_INJECTION]: The skill documents the handling of external webhook events, creating a surface for potential indirect prompt injection.
- Ingestion points: Webhook payloads processed in the
/webhookshandler example inSKILL.md. - Boundary markers: None present in the provided snippets.
- Capability inventory: The skill defines methods for forking, streaming, and transcribing calls via the
telnyxclient inSKILL.md. - Sanitization: The skill provides an example of Ed25519 signature verification using
client.webhooks.unwrap()to ensure data authenticity.
Audit Metadata