flexport-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow is to receive Flexport webhook HTTP requests (outsider-authored), read the request body as raw text/bytes, verify the HMAC, then parse/print fields from that body—so the inbound free-form JSON payload from Flexport flows into the agent’s LLM-executable context (via stringification/console/logging or any downstream handler logic) without being authored by the operating user.