The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses curl and jq to communicate with the vendor's telephony API. This is consistent with its stated purpose of sending SMS and making calls.
[EXTERNAL_DOWNLOADS]: Network requests are directed to the service endpoint defined by $SAAS_API_URL. All operations target the vendor's infrastructure for the intended telephony functionality.
[PROMPT_INJECTION]: The skill takes user input to populate message bodies and voice prompts. Ingestion points: fields like body and prompt in SKILL.md. Boundary markers: none. Capability inventory: network communication via curl to $SAAS_API_URL. Sanitization: none. This surface is standard for telephony functionality.
[CREDENTIALS_UNSAFE]: Authentication is handled via the SAAS_API_KEY environment variable. No hardcoded credentials or unauthorized access to sensitive local files were identified.

saas-telephony