telnyx-voice-gather-python

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests untrusted, user-provided content via AI gather and call webhooks (e.g., POST /calls/{call_control_id}/actions/gather_using_ai and the webhook field data.payload.message_history) and also accepts arbitrary audio URLs (audio_url / invalid_audio_url) which the assistant will process and which can materially influence subsequent actions.