community-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is ingested at runtime via the required webhook POST body in each example handler route (e.g., Express /webhooks/community parsing rawBody into event and logging object.text), meaning an outsider can submit arbitrary JSON text to the endpoint.