telegram

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow uses Telegram Bot actions (e.g., telegram_get_updates / telegram_get_chat_history) to ingest incoming Telegram updates/messages authored by other users into the agent context as readable message text, which is outsider free-form content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs running npx @useclawlink/cli (the CLI published at https://www.npmjs.com/package/@useclawlink/cli) which fetches and executes remote npm package code at runtime and is required for the skill to operate, so it executes external code.