ringbot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches public place data (via the goplaces search/details steps) and initiates live phone calls through Twilio/LiveKit where the agent will transcribe and act on untrusted third-party speech, so external user-generated content is ingested and can influence agent behavior.