telnyx-voice-media-java

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly shows ingesting user-generated call content via webhooks (e.g., the call.recording.transcription.saved event contains data.payload.transcription_text) and accepts/playback of arbitrary audio URLs (audio_url/media_url), both of which are untrusted third-party inputs the handler is instructed to "process" and could influence subsequent actions.