telegram-native-8787

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Telegram Native 8787 ingests outsider-authored free text from Telegram updates via the runtime path Telegram update -> /api/channels/telegram/webhook -> ... -> OpenClaw Telegram provider -> Telegram user-visible reply, where message bodies/user content from non-operating users can be read and included in the agent/LLM context during handling.