Send SMS text and bulk messages via TelTel.io API

• Outcome: Review
• Latest audit: Jul 10, 2026 · 4:49 AM UTC
• Version: 1.0.1

Overview

The skill appears to do what it says: send single or bulk SMS messages through TelTel, with no evidence of hidden persistence, unrelated data access, or deceptive behavior.

Install only if you want the agent to send SMS through your TelTel account. Treat the TelTel API key as sensitive, use dry-run or explicit confirmation before bulk sends, and avoid sending secrets, regulated data, or sensitive personal information in SMS unless you are authorized to share it with TelTel and the recipients.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 92% confidence
• Finding: The skill documentation indicates use of environment variables and outbound network access, but the skill does not declare corresponding permissions. Missing permission declarations reduce transparency and can prevent users or platforms from understanding that API keys will be read and SMS data will be sent to an external service. In a messaging skill, these capabilities are expected, but they still need to be explicitly declared because they involve sensitive credentials and third-party data transmission.

Vague Triggers

Low

• Confidence: 79% confidence
• Finding: The description explains what the skill does but does not clearly define invocation boundaries, guardrails, or user-confirmation expectations for sending SMS. Because SMS sending has real-world cost and can contact external recipients, vague triggering guidance increases the chance of accidental or overbroad use. The context makes this somewhat more sensitive than a read-only integration because misuse can immediately spend funds and send messages to third parties.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The documentation does not clearly warn users that message bodies, sender identifiers, callback URLs, and recipient phone numbers are transmitted to TelTel, a third-party SMS provider. This creates a privacy and compliance risk because users may disclose personal or sensitive information without understanding that it leaves the local environment and is processed externally. In an SMS skill, this omission is particularly important because phone numbers and message contents are often regulated or sensitive.

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: scripts/send_sms_bulk.js:9

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: scripts/send_sms.js:13