telegram-bot-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a Telegram bot runtime that ingests user-provided chat text via the required text handler bot.on('text', (ctx) => { ... ctx.message.text }), meaning outsider-authored free text from Telegram users is directly available to the agent/workflow at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes explicit Telegram Payments integration: code that creates invoices (ctx.replyWithInvoice with provider_token, currency, prices) and handles successful payments (bot.on('successful_payment') activating premium). This is a specific payment execution capability (creating and processing real payments), so it grants direct financial execution authority.