phone-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The application operates a real-time voice agent server that listens to incoming phone calls via Twilio webhooks and ingests spoken user audio, which is transcribed and fed directly into the OpenAI LLM prompt loop without authentication or sanitization.