10dlc Registration

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is purpose-aligned for Telnyx 10DLC setup, but it uses Telnyx account credentials and commands that can change SMS registration and phone-number assignments.

Before installing, make sure you trust the Telnyx CLI source, use a suitably scoped Telnyx API key, and run the scripts only when you are ready to create or update real 10DLC registrations and phone-number assignments.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Incorrect inputs could create the wrong 10DLC registration or attach a phone number to the wrong campaign.

Why it was flagged

These Telnyx CLI commands create registration resources and assign a phone number to a campaign, which is the skill's stated purpose but can modify the user's Telnyx account.

Skill content
telnyx 10dlc brand create --sole-prop ...; telnyx 10dlc campaign create ...; telnyx 10dlc assign +15551234567 <campaign-id>
Recommendation

Run the workflow interactively and confirm business details, campaign IDs, and phone numbers before submitting or assigning anything.

What this means

Anyone or any agent using this skill with the configured credential can perform the documented Telnyx 10DLC operations allowed by that API key.

Why it was flagged

The skill explicitly requires Telnyx CLI access and a Telnyx API key, giving it delegated authority to act on the user's Telnyx account.

Skill content
requires":{"bins":["telnyx"],"env":["TELNYX_API_KEY"]},"primaryEnv":"TELNYX_API_KEY"
Recommendation

Use the least-privileged Telnyx API key available, keep it private, and revoke or rotate it if it is no longer needed.

What this means

Installing a global CLI affects the local environment and relies on the package downloaded at install time.

Why it was flagged

The setup helper can install an external npm package globally without a pinned version; this is expected for the Telnyx CLI but depends on npm package provenance.

Skill content
npm install -g @telnyx/api-cli
Recommendation

Install the Telnyx CLI from Telnyx's official instructions or verify the npm package/version before allowing setup.sh to install it.