robius-matrix-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly subscribes to Matrix timelines and ingests user-generated room events and media (see spawn_timeline_subscriber -> timeline.subscribe() producing TimelineUpdate::NewItems, the FetchMedia/FetchAvatar MatrixRequest variants, and client build using arbitrary homeserver_url), so it consumes untrusted third-party content that can influence runtime behavior.