inspect-calls-and-metrics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow for this skill is the live dashboard/metrics pipeline, which ingests call transcripts and other call content originating from external parties (e.g., the phone caller via the carrier payload) into CallMetrics.transcript and then exposes it via /api/calls//sse and the on_call_end hook, so outsider-authored free text is fed into the agent/LLM context through the stored transcript data.