telnyx-voice-media-java

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill accepts arbitrary audio URLs for playback (audio_url in "Play audio URL") and publishes webhooks including call.recording.transcription.saved with transcription_text (user-generated/untrusted content) as part of its documented runtime workflow, so third‑party content can be ingested and could influence subsequent call-control actions.