telegram-bot-basics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime, the bot ingests Telegram Update objects (including free-form message.text/callback_query.data) from external users via Telegram’s Bot API (getUpdates long-poll or webhook POST), and those fields are then available in the LLM context through the agent’s message-handling flow.