Telnyx Toolkit

Complete Telnyx toolkit — ready-to-use tools (STT, TTS, RAG, Networking, 10DLC) plus SDK documentation for JavaScript, Python, Go, Java, and Ruby.

This skill appears to be a comprehensive Telnyx toolkit (many auto-generated SDK docs and tools), but it contains scripts that do more than simple API calls: they obtain GitHub tokens, solve PoW for account signup, modify sudoers, configure/ expose network interfaces, upload local files to Telnyx Storage, and the SKILL.md explicitly tells the agent to attempt account top-ups (charge the stored payment method) without prompting the user. Before installing: 1) Verify the author/source (no homepage listed; owner id unknown). Prefer the official Telnyx distribution or confirm the package origin. 2) Inspect the companion SKILL.md and scripts (especially getting-started/*, tools/network/*, tools/storage-backup/*, and any get-gh-token/refresh-gh-scopes scripts) to see where credentials/tokens are sent and what commands run as root. 3) Do not run privileged network scripts on a production machine — test in an isolated VM/container first. 4) Be cautious about providing TELNYX_API_KEY to an agent that can run autonomously; consider restricting autonomous invocation or running scripts manually. 5) Pay attention to the auto-top-up behavior: ensure you want the skill to attempt payments using your stored payment method. If you cannot audit the scripts or confirm the package origin, avoid installing or run only the documentation/SDK files without executing any scripts.

Type: OpenClaw Skill Name: telnyx-toolkit Version: 1.5.0 The skill is classified as suspicious due to several high-risk capabilities. Notably, 'tools/network/setup-sudoers.sh' modifies the system's sudoers file to allow passwordless execution of WireGuard commands, posing a significant privilege escalation risk. Additionally, 'tools/storage-backup/backup.sh' and 'backup.py' perform broad backups of the entire OpenClaw workspace (including 'memory', 'knowledge', 'scripts', 'skills') to Telnyx Storage, which could unintentionally exfiltrate sensitive user data if the workspace contains it. Furthermore, 'tools/voice-sip/src/dev.ts' executes other CLI tools ('openclaw', 'clawdbot', 'moltbook') via `child_process.execAsync`, creating a potential command injection vulnerability if the arguments passed to these CLIs can be manipulated by the agent. Direct handling of GitHub OAuth tokens and other sensitive API keys in various scripts also presents a risk if not perfectly secured.