twilio-voice-conversation-relay

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). SKILL.md describes a runtime WebSocket flow where Twilio sends the caller’s ASR transcript (prompt → voicePrompt) into the app, and the app then passes event["voicePrompt"] to the LLM (call_llm(event["voicePrompt"])), making it outsider-authored free text (caller speech) that becomes LLM context.