telegram-bot-api-polls-checklists-dice-and-user-selection
Warn
Audited by Snyk on Mar 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill explicitly ingests user-generated Telegram content (poll updates, poll answers, checklist objects, and user/chat selection) as part of its core workflow (see "Core API surface" and "Checklists" in SKILL.md), so untrusted third-party chat input could influence agent actions.
Audit Metadata