agent-task-confirm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly inspects agent sessions and their last messages (e.g., sessions_list and sessionKey="agent::telegram:group:-1003890797239") and uses those user-generated Telegram group messages to decide retries, reminders, and reassignments, exposing the agent to untrusted third-party content that could influence actions.