telnyx-voice-gather-ruby

Warn

Audited by Snyk on Mar 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). This skill ingests untrusted, user-generated call content (e.g., data.payload.message_history delivered in the CallAIGather* webhooks) and can fetch/play arbitrary external audio via the gather_using_audio audio_url/invalid_audio_url parameters, which the AI assistant is expected to read/interpret and that can influence subsequent actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 12, 2026, 03:36 AM
Issues
1