docusign-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow is handling DocuSign Connect webhook HTTP POSTs and directly parsing the outsider-authored JSON request body (payload = JSON.parse(req.body...)/JSON.parse(body)), which would become LLM-readable text if the agent includes it in LLM context; this is not a sandboxed/bundled reference.