callkit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow ingests VoIP push payload data via PKPushRegistryDelegate (didReceiveIncomingVoIPPushWith:metadata:withCompletionHandler → handleIncomingVoIPPush → payload.dictionaryPayload["handle"]), where the payload is outsider-authored content from the remote sender/server (APNs/PushKit), and that extracted string is then used to populate CXCallUpdate.localizedCallerName/remoteHandle in the LLM-relevant control flow.