cloudsignal-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the Express/Next.js/FastAPI webhook receiver routes, the handler parses and ingests the outsider-controlled JSON request body (including the attacker-supplied type/fields) at POST /webhooks/cloudsignal / POST http://.../webhooks/cloudsignal and then dispatches based on that free text after comparing body.apikey.