twilio-conversation-memory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md describes an “Automatic” path where observations/summaries are extracted from the conversation transcript and saved, and later “Recall” retrieves that stored text for the agent to use; since the transcript content is authored by external callers/participants, this can become outsider-authored free text that the agent ingests via Recall at runtime.