skills/expanso-io/skills.expanso.io/expanso-http-webhook-ingestion/Snyk

expanso-http-webhook-ingestion

Warn

Audited by Snyk on Jul 26, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). The required workflow is an HTTP server processor that ingests incoming webhook request body text (from arbitrary external senders) at runtime and maps it into fields for Kafka routing/validation, so outsider-authored free text can flow into the agent/LLM context.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 26, 2026, 05:45 AM

Issues

1

Security Audit — snyk — expanso-http-webhook-ingestion