telnyx-texml-javascript
Enables developers to build voice applications using TeXML with JavaScript SDK examples for managing calls and applications.
Install this skill
Security score
The telnyx-texml-javascript skill was audited on Mar 1, 2026 and we found 27 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 557 | ## Webhooks |
Webhook reference - potential data exfiltration
| 559 | The following webhook events are sent to your configured webhook URL. |
Webhook reference - potential data exfiltration
| 560 | All webhooks include `telnyx-timestamp` and `telnyx-signature-ed25519` headers for verification (Standard Webhooks compatible). |
Webhook reference - potential data exfiltration
| 564 | | `TexmlCallAnsweredWebhook` | TeXML Call Answered. Webhook sent when a TeXML call is answered | |
Webhook reference - potential data exfiltration
| 565 | | `TexmlCallCompletedWebhook` | TeXML Call Completed. Webhook sent when a TeXML call is completed | |
Webhook reference - potential data exfiltration
| 566 | | `TexmlCallInitiatedWebhook` | TeXML Call Initiated. Webhook sent when a TeXML call is initiated | |
Webhook reference - potential data exfiltration
| 567 | | `TexmlCallRingingWebhook` | TeXML Call Ringing. Webhook sent when a TeXML call is ringing | |
Webhook reference - potential data exfiltration
| 568 | | `TexmlCallAmdWebhook` | TeXML Call AMD. Webhook sent when Answering Machine Detection (AMD) completes during a TeXML call | |
Webhook reference - potential data exfiltration
| 569 | | `TexmlCallDtmfWebhook` | TeXML Call DTMF. Webhook sent when a DTMF digit is received during a TeXML call | |
Webhook reference - potential data exfiltration
| 570 | | `TexmlGatherWebhook` | TeXML Gather. Webhook sent when a Gather command completes (sent to the action URL) | |
Webhook reference - potential data exfiltration
| 571 | | `TexmlHttpRequestWebhook` | TeXML HTTP Request. Webhook sent as response to an HTTP Request instruction | |
Webhook reference - potential data exfiltration
| 572 | | `TexmlAiGatherWebhook` | TeXML AI Gather. Webhook sent when AI Gather completes with transcription results | |
Webhook reference - potential data exfiltration
| 573 | | `TexmlConferenceJoinWebhook` | TeXML Conference Join. Webhook sent when a participant joins a TeXML conference | |
Webhook reference - potential data exfiltration
| 574 | | `TexmlConferenceLeaveWebhook` | TeXML Conference Leave. Webhook sent when a participant leaves a TeXML conference | |
Webhook reference - potential data exfiltration
| 575 | | `TexmlConferenceSpeakerWebhook` | TeXML Conference Speaker. Webhook sent when a participant starts or stops speaking in a TeXML conference | |
Webhook reference - potential data exfiltration
| 576 | | `TexmlConferenceEndWebhook` | TeXML Conference End. Webhook sent when a TeXML conference ends | |
Webhook reference - potential data exfiltration
| 577 | | `TexmlConferenceStartWebhook` | TeXML Conference Start. Webhook sent when a TeXML conference starts | |
Webhook reference - potential data exfiltration
| 578 | | `TexmlQueueWebhook` | TeXML Queue. Webhook sent for queue status events (triggered by Enqueue command waitUrl) | |
Webhook reference - potential data exfiltration
| 579 | | `TexmlRecordingCompletedWebhook` | TeXML Recording Completed. Webhook sent when a recording is completed during a TeXML call (triggered by recordingStatusCallbackEvent) | |
Webhook reference - potential data exfiltration
| 580 | | `TexmlRecordingInProgressWebhook` | TeXML Recording In-Progress. Webhook sent when a recording starts during a TeXML call (triggered by recordingStatusCallbackEvent) | |
Webhook reference - potential data exfiltration
| 581 | | `TexmlSiprecWebhook` | TeXML SIPREC. Webhook sent for SIPREC session status updates | |
Webhook reference - potential data exfiltration
| 582 | | `TexmlStreamWebhook` | TeXML Stream. Webhook sent for media streaming status updates | |
Webhook reference - potential data exfiltration
| 583 | | `TexmlTranscriptionWebhook` | TeXML Transcription. Webhook sent when a recording transcription is completed | |
Access to .env file
| 30 | apiKey: process.env['TELNYX_API_KEY'], // This is the default and can be omitted |
Reading sensitive environment variables
| 30 | apiKey: process.env['TELNYX_API_KEY'], // This is the default and can be omitted |
External URL reference
| 58 | voice_url: 'https://example.com', |
External URL reference
| 85 | voice_url: 'https://example.com', |