hexabot-channel-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the Hexabot “channel” runtime path, outsider-authored free text is ingested from the provider webhook/request body at HttpChannelHandler.decode() (e.g., examples/acme-http-channel/index.channel.ts parses req.body with Acme.webhookSchema.parse and then uses rawEvent.message.text).