ktgbotapi

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md shows the bot directly ingesting arbitrary Telegram user content (e.g., onCommand, onText, onInlineQuery, waitText handlers) which the agent reads/parses and uses to drive actions and state transitions, so untrusted third‑party input can materially influence behavior.