telnyx-account-access-java
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the
telnyx-javaSDK (version 6.26.0) from the Maven Central repository. This is an official vendor-provided library for interacting with Telnyx APIs. - [DATA_EXFILTRATION]: The skill includes functionality to manage integration secrets and telephony credentials. This involves the handling and potential exposure of sensitive authentication tokens and passwords within the agent's context.
- [COMMAND_EXECUTION]: The skill provides the ability to perform administrative actions such as deleting IP access addresses, managing billing groups, and creating SSO authentication providers.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it interpolates user-provided or external data into API calls that perform administrative changes.
- Ingestion points: Data enters the agent context through various creation and update parameters across the skill, such as
ipAddressinAccessIpAddressCreateParamsandidentifierinIntegrationSecretCreateParams. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the provided code snippets.
- Capability inventory: The skill can create, retrieve, and delete account resources, including security-critical IP whitelists and authentication providers.
- Sanitization: There is no evidence of input validation or sanitization within the provided Java snippets.
Audit Metadata