Skip to main content

sip-voice-call-control

Enables hands-free voice call control using Telnyx API for AI assistants, facilitating natural conversations and reminders.

Install this skill

or
49/100

Security score

The sip-voice-call-control skill was audited on Mar 1, 2026 and we found 13 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 106

Direct command execution function call

SourceSKILL.md
106exec({
low line 14

Webhook reference - potential data exfiltration

SourceSKILL.md
14Your Phone (SIP) → Telnyx Call Control → Webhooks → This Server → Commands back
medium line 19

Webhook reference - potential data exfiltration

SourceSKILL.md
19This is **not WebRTC** — it's server-side SIP call handling. Telnyx handles all audio; we just receive webhooks and send commands.
medium line 169

Webhook reference - potential data exfiltration

SourceSKILL.md
169- Verify webhook URL is reachable (tunnel must be active)
low line 33

Access to .env file

SourceSKILL.md
33cp .env.example .env
medium line 36

Access to .env file

SourceSKILL.md
36Edit `.env`:
medium line 74

Access to .env file

SourceSKILL.md
74- See `.env.example` for full list
medium line 83

Access to .env file

SourceSKILL.md
83### 2. Write .env File
low line 86

Access to .env file

SourceSKILL.md
86cat > .env << 'EOF'
medium line 181

Access to .env file

SourceSKILL.md
181- Or change `PORT` in .env
low line 62

External URL reference

SourceSKILL.md
62- Get from: https://portal.telnyx.com/#/app/auth/v2
low line 185

External URL reference

SourceSKILL.md
185- Telnyx Call Control: https://developers.telnyx.com/docs/voice/call-control
low line 186

External URL reference

SourceSKILL.md
186- Telnyx Inference: https://developers.telnyx.com/docs/inference
Scanned on Mar 1, 2026
View Security Dashboard