twilio-hardened

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's SKILL.md explicitly requires "Webhook URLs for callbacks" and instructs to "Validate webhook signatures on every inbound request," which indicates the agent will ingest and act on inbound user-generated SMS/WhatsApp webhook payloads (untrusted third-party content) that can materially influence API calls and next actions.