epictexting

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow monitors inbound SMS replies and recent messages via list_recent_messages, allowing any outsider who sends an SMS to the user's Twilio number to inject untrusted text directly into the agent's context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill connects to a hosted Model Context Protocol (MCP) server at https://www.epictexting.app/api/mcp/mcp, which acts as a third-party service provider (common/reputable unofficial publisher) supplying runtime tools and operational behavior.