telegram-post

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Telegram skill runtime path send_post() reads and ingests draft markdown text from a file path supplied by the user/attacker (e.g., main() passes args.file to send_post, which then does path.read_text() and converts it to Telegram HTML).