telegram-bots

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes runtime processing of Telegram Bot API updates (webhook/polling) where the bot receives outsider-authored message text and other update fields, which the LLM could ingest while handling updates.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly documents Telegram payment APIs and flows: sendInvoice / createInvoiceLink, pre_checkout_query, successful_payment, and refundStarPayment, plus Telegram Stars (XTR) handling and the ten-second answerPreCheckoutQuery window. These are specific payment/transaction operations (including refunds and delivery tied to payment events), so the skill grants direct financial execution authority.