telegram-bot-api-fundamentals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill text describes Telegram runtime ingestion of outsider-authored user messages via the required polling/webhook path (getUpdates → parsed message.text in grammY handlers like bot.command(...)), meaning the agent can read free-form text submitted by external users at runtime.