add-telegram

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow executes a Telegram API call using curl against api.telegram.org to fetch the bot username, which parses bot metadata controlled by Telegram API responses, but does not monitor or consume outsider-authored free text streams or unselected user submissions without an explicit fetch.