api-messaging-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow is an HTTP webhook handler that ingests outsider-authored free text from incoming webhook request bodies (raw payload + headers) that anyone can POST to the endpoint, so an outsider can submit poison content directly into the workflow’s monitored input before any verification/routing.