telephony

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The telephony skill polls inbound SMS messages from Twilio via twilio-inbox, exposing the agent to outsider-authored free text submitted by anyone who texts the agent's phone number.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill provides operations to search for and buy Twilio phone numbers (twilio-buy), which is a direct financial purchase operation. There is no independent service-enforced access control or authentication check documented for executing this purchase via the helper script beyond the agent passing API credentials.