webhook-verifier

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow reads and verifies the raw HTTP request body and signature headers from the incoming webhook request at runtime; this request body is outsider-authored free text (sent by the external provider) and is ingested into the agent/LLM context as rawBody/payload text during code generation/verification steps.