telegram-serverless-bot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow for this Telegram bot skill handles incoming Telegram updates (such as message text, user names, callback data, and webhook bodies) submitted by any Telegram user.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill assists developers in building Telegram bots on Telegram Serverless, including Telegram Stars digital payment checkout flows (sendInvoice, pre_checkout_query, successful_payment). Because this guides the implementation of digital payment collection and invoice processing within bot handlers, it represents an indirect financial operation (creating bills/invoices/payment flows for downstream handling). Under the evaluation framework, indirect financial operations are classified as medium severity.