telnyx-texml-javascript

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the telnyx npm package. This is the official SDK from the vendor and is considered a trusted dependency.
  • [PROMPT_INJECTION]: The skill includes functionality to ingest call transcriptions, which creates a surface for indirect prompt injection. 1. Ingestion points: Data enters through the retrieveRecordingTranscriptionSidJson method. 2. Boundary markers: None are defined in the examples to separate untrusted transcription data from agent instructions. 3. Capability inventory: The skill has the ability to initiate calls, manage conferences, and modify TeXML application settings. 4. Sanitization: No explicit sanitization or filtering of the ingested transcription text is provided within the skill's examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 02:18 AM