robius-matrix-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill subscribes to Matrix room timelines (see spawn_timeline_subscriber which calls timeline.subscribe() and processes stream.next() to produce TimelineUpdate::NewItems that the UI then applies via apply_new_items), meaning it ingests user-generated content from arbitrary Matrix homeservers (homeserver_url in build_client) that could influence UI behavior and subsequent actions.