Telnyx Freemium Upgrade

Automatically upgrade Telnyx account from freemium to professional tier

This skill is internally consistent with its stated purpose, but it handles sensitive credentials in ways you should explicitly accept before installing: it will read or derive your Telnyx API key (env var or ~/.config/telnyx/config.json), use the local GitHub CLI to obtain your GitHub token (get-gh-token.sh / gh auth token), and send that token to Telnyx API endpoints to verify identity. If you do not trust the skill's author or Telnyx endpoints, do not install or run it. Recommended precautions: 1) Review the included scripts locally (they are bundled in the skill) to confirm behavior; 2) Only run on a machine you control; 3) Use least-privileged GitHub credentials (or prefer the LinkedIn browser flow) and do not reuse high-privilege personal tokens; 4) Be aware the skill writes ~/.telnyx/upgrade.json and a gh-refresh PID file; 5) Because the skill's source/homepage is unknown, consider running the scripts manually under supervision rather than granting autonomous agent execution.

Type: OpenClaw Skill Name: telnyx-freemium-upgrade Version: 1.0.0 The skill is classified as suspicious due to significant prompt injection vulnerabilities against the OpenClaw agent, primarily within the SKILL.md instructions. Specifically, the `openclaw cron add` command's `--message` argument interpolates variables like `<EVALUATION_ID>` (sourced from an external API) directly into a command string. If this external ID is not sanitized, it could allow an attacker to inject arbitrary commands for execution by the agent. Similarly, the API key resolution in SKILL.md uses a shell command that interpolates `$HOME`, posing another potential shell injection risk. While the skill's stated purpose (Telnyx account upgrade) and the code's functionality appear benign, these vulnerabilities could lead to arbitrary command execution if exploited, without clear evidence of intentional malicious design within the skill itself.