encore-webhook

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow is an api.raw webhook endpoint that ingests third-party HTTP request bodies (outsider-authored free text) into the handler via for await (const chunk of req) / rawBody = ...toString("utf8"), which is then passed to signature verification and potentially parsed/used in LLM context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes explicit integration with a payment gateway: Stripe. It shows using the Stripe SDK (new Stripe(stripeApiKey())), verifying Stripe webhook signatures (stripe.webhooks.constructEvent), and references a Stripe webhook secret — all specific to a payment gateway API. Even though the example focuses on webhook verification, this is a specific Stripe integration (not a generic HTTP tool) and therefore grants potential direct financial execution capability.