telnyx-account-access-java

Pass

Audited by Gen Agent Trust Hub on Mar 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses the telnyx-java SDK (version 6.26.0) from the Maven Central repository. This is an official vendor-provided library for interacting with Telnyx APIs.
  • [DATA_EXFILTRATION]: The skill includes functionality to manage integration secrets and telephony credentials. This involves the handling and potential exposure of sensitive authentication tokens and passwords within the agent's context.
  • [COMMAND_EXECUTION]: The skill provides the ability to perform administrative actions such as deleting IP access addresses, managing billing groups, and creating SSO authentication providers.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it interpolates user-provided or external data into API calls that perform administrative changes.
  • Ingestion points: Data enters the agent context through various creation and update parameters across the skill, such as ipAddress in AccessIpAddressCreateParams and identifier in IntegrationSecretCreateParams.
  • Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the provided code snippets.
  • Capability inventory: The skill can create, retrieve, and delete account resources, including security-critical IP whitelists and authentication providers.
  • Sanitization: There is no evidence of input validation or sanitization within the provided Java snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 26, 2026, 05:52 PM