send-email

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Outsider-authored text enters only via the operator-provided ${var} request (parsed in “Steps → Parse the request from ${var}” and used to form PAYLOAD for the Resend POST https://api.resend.com/emails), so the runtime does ingest freeform external text but only as explicitly provided for composing/sending.