using-telegram-bot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's code examples in SKILL.md show the bot ingesting and acting on arbitrary Telegram user messages (e.g., bot.on('text', ctx => ctx.reply(You said: ${ctx.message.text})) and bot.command('echo', ...)), meaning untrusted third-party content from users is read and can influence behavior.