telegram-bot-api-polls-checklists-dice-and-user-selection

Warn

Audited by Snyk on Mar 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill explicitly ingests user-generated Telegram content (poll updates, poll answers, checklist objects, and user/chat selection) as part of its core workflow (see "Core API surface" and "Checklists" in SKILL.md), so untrusted third-party chat input could influence agent actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 7, 2026, 01:03 PM