telegram

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill's documentation and workflows (e.g., references/inline.md and references/methods.md) explicitly require handling public/user-provided URLs and files (inline query result URLs, HTTP InputFile URLs, and getFile download links) that the bot must read/interpret to generate responses or take actions, exposing the agent to untrusted third‑party content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes payment functionality: it references "Payments / Telegram Stars", "Accepting payments, Telegram Stars, invoices" and a payments reference file. This is a specific, built-in API surface for accepting payments/invoices (i.e., a payment gateway-like capability), not a generic tool. Under the core rule, that qualifies as direct financial execution capability.