telnyx-voice-curl

Enables programmatic call control with Telnyx API using curl for making, receiving, and managing calls in real-time.

Install this skill

or

0/100

Security score

The telnyx-voice-curl skill was audited on May 13, 2026 and we found 46 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 328

Curl to non-GitHub URL

SourceSKILL.md

328	curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/calls/v3:550e8400-e29b-41d4-a716-446655440000_gRU1OGRkYQ"

medium line 351

Curl to non-GitHub URL

SourceSKILL.md

351	curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/connections/1293384261075731461/active_calls"

medium line 379

Curl to non-GitHub URL

SourceSKILL.md

379	curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/call_control_applications?sort=connection_name"

medium line 5

Webhook reference - potential data exfiltration

SourceSKILL.md

5	stream audio. Real-time call events via webhooks.

medium line 61

Webhook reference - potential data exfiltration

SourceSKILL.md

61	- Call Control is event-driven. After `dial()` or an inbound webhook, issue follow-up commands from webhook handlers using the `call_control_id` in the event payload.

medium line 62

Webhook reference - potential data exfiltration

SourceSKILL.md

62	- Outbound and inbound flows are different: outbound calls start with `dial()`, while inbound calls must be answered from the incoming webhook before other commands run.

medium line 63

Webhook reference - potential data exfiltration

SourceSKILL.md

63	- A publicly reachable webhook endpoint is required for real call control. Without it, calls may connect but your application cannot drive the live call state.

medium line 67

Webhook reference - potential data exfiltration

SourceSKILL.md

67	Do not invent Telnyx parameters, enums, response fields, or webhook fields.

medium line 71

Webhook reference - potential data exfiltration

SourceSKILL.md

71	- Before reading or matching webhook fields beyond the inline examples, read [the webhook payload reference](references/api-details.md#webhook-payload-fields).

medium line 88

Webhook reference - potential data exfiltration

SourceSKILL.md

88	\| `client_state` \| string \| No \| Use this field to add state to every subsequent webhook. \|

medium line 122

Webhook reference - potential data exfiltration

SourceSKILL.md

122	\| `client_state` \| string \| No \| Use this field to add state to every subsequent webhook. \|

medium line 123

Webhook reference - potential data exfiltration

SourceSKILL.md

123	\| `webhook_url` \| string (URL) \| No \| Use this field to override the URL for which Telnyx will sen... \|

medium line 140

Webhook reference - potential data exfiltration

SourceSKILL.md

140	Common post-answer control path with downstream webhook implications.

medium line 149

Webhook reference - potential data exfiltration

SourceSKILL.md

149	\| `client_state` \| string \| No \| Use this field to add state to every subsequent webhook. \|

medium line 150

Webhook reference - potential data exfiltration

SourceSKILL.md

150	\| `webhook_url` \| string (URL) \| No \| Use this field to override the URL for which Telnyx will sen... \|

medium line 169

Webhook reference - potential data exfiltration

SourceSKILL.md

169	### Webhook Verification

medium line 171

Webhook reference - potential data exfiltration

SourceSKILL.md

171	Telnyx signs webhooks with Ed25519. Each request includes `telnyx-signature-ed25519`

low line 175

Webhook reference - potential data exfiltration

SourceSKILL.md

175	# Telnyx signs webhooks with Ed25519 (asymmetric — NOT HMAC/Standard Webhooks).

low line 176

Webhook reference - potential data exfiltration

SourceSKILL.md

176	# Headers sent with each webhook:

low line 181

Webhook reference - potential data exfiltration

SourceSKILL.md

181	# Use the Telnyx SDK in your language for verification (client.webhooks.unwrap).

medium line 186

Webhook reference - potential data exfiltration

SourceSKILL.md

186	## Webhooks

medium line 188

Webhook reference - potential data exfiltration

SourceSKILL.md

188	These webhook payload fields are inline because they are part of the primary integration path.

medium line 200

Webhook reference - potential data exfiltration

SourceSKILL.md

200	\| `data.payload.call_leg_id` \| string \| ID that is unique to the call and can be used to correlate webhook events. \|

medium line 201

Webhook reference - potential data exfiltration

SourceSKILL.md

201	\| `data.payload.call_session_id` \| string \| ID that is unique to the call session and can be used to correlate webhook ev... \|

medium line 213

Webhook reference - potential data exfiltration

SourceSKILL.md

213	\| `data.payload.call_leg_id` \| string \| ID that is unique to the call and can be used to correlate webhook events. \|

medium line 214

Webhook reference - potential data exfiltration

SourceSKILL.md

214	\| `data.payload.call_session_id` \| string \| ID that is unique to the call session and can be used to correlate webhook ev... \|

medium line 229

Webhook reference - potential data exfiltration

SourceSKILL.md

229	If you need webhook fields that are not listed inline here, read [the webhook payload reference](references/api-details.md#webhook-payload-fields) before writing the handler.

medium line 239

Webhook reference - potential data exfiltration

SourceSKILL.md

239	End a live call from your webhook-driven control flow.

medium line 246

Webhook reference - potential data exfiltration

SourceSKILL.md

246	\| `client_state` \| string \| No \| Use this field to add state to every subsequent webhook. \|

medium line 271

Webhook reference - potential data exfiltration

SourceSKILL.md

271	\| `client_state` \| string \| No \| Use this field to add state to every subsequent webhook. \|

medium line 300

Webhook reference - potential data exfiltration

SourceSKILL.md

300	\| `client_state` \| string \| No \| Use this field to add state to every subsequent webhook. \|

medium line 398

Webhook reference - potential data exfiltration

SourceSKILL.md

398	Use the core tasks above first. The operations below are indexed here with exact SDK methods and required params; use [references/api-details.md](references/api-details.md) for full optional params, r

medium line 403

Webhook reference - potential data exfiltration

SourceSKILL.md

403	\| Create a call control application \| HTTP only \| `POST /call_control_applications` \| Create or provision an additional resource when the core tasks do not cover this flow. \| `application_name`, `webh

medium line 405

Webhook reference - potential data exfiltration

SourceSKILL.md

405	\| Update a call control application \| HTTP only \| `PATCH /call_control_applications/{id}` \| Modify an existing resource without recreating it. \| `application_name`, `webhook_event_url`, `id` \|

medium line 410

Webhook reference - potential data exfiltration

SourceSKILL.md

410	### Other Webhook Events

medium line 418

Webhook reference - potential data exfiltration

SourceSKILL.md

418	For exhaustive optional parameters, full response schemas, and complete webhook payloads, see [references/api-details.md](references/api-details.md).

low line 47

External URL reference

SourceSKILL.md

47	"https://api.telnyx.com/v2/calls"

low line 101

External URL reference

SourceSKILL.md

101	"https://api.telnyx.com/v2/calls"

low line 131

External URL reference

SourceSKILL.md

131	"https://api.telnyx.com/v2/calls/v3:550e8400-e29b-41d4-a716-446655440000_gRU1OGRkYQ/actions/answer"

low line 161

External URL reference

SourceSKILL.md

161	"https://api.telnyx.com/v2/calls/v3:550e8400-e29b-41d4-a716-446655440000_gRU1OGRkYQ/actions/transfer"

low line 255

External URL reference

SourceSKILL.md

255	"https://api.telnyx.com/v2/calls/v3:550e8400-e29b-41d4-a716-446655440000_gRU1OGRkYQ/actions/hangup"

low line 284

External URL reference

SourceSKILL.md

284	"https://api.telnyx.com/v2/calls/v3:550e8400-e29b-41d4-a716-446655440000_gRU1OGRkYQ/actions/bridge"

low line 311

External URL reference

SourceSKILL.md

311	"https://api.telnyx.com/v2/calls/v3:550e8400-e29b-41d4-a716-446655440000_gRU1OGRkYQ/actions/reject"

low line 328

External URL reference

SourceSKILL.md

328	curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/calls/v3:550e8400-e29b-41d4-a716-446655440000_gRU1OGRkYQ"

low line 351

External URL reference

SourceSKILL.md

351	curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/connections/1293384261075731461/active_calls"

low line 379

External URL reference

SourceSKILL.md

379	curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/call_control_applications?sort=connection_name"

Scanned on May 13, 2026

View Security Dashboard

Installation guide →

GitHub Stars 176

Rate this skill

Categorysales

UpdatedJune 10, 2026

openclaw api sdr customer-success-manager sales-engineer business-development technical-support twilio sales support