telegram

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text from Telegram users (e.g., .message.text in getUpdates) is read at runtime by scripts/telegram.sh ask and scripts/telegram.sh read, then printed to stdout (e.g., answer=$(jq ... .message.text ...) and printf '%s\n' "$answer"), which an agent can feed into its LLM context as the tool result.