linkedin-webhooks
Warn
Audited by Snyk on Jul 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). The required workflow is a webhook handler that ingests outsider-authored free text at runtime: the HTTP
GET challengeCodeand especiallyPOSTraw JSON body (from LinkedIn) is read (req.body/request.body()/request.text()) and then parsed/logged, meaning it can flow into the agent context if later steps include LLM processing.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata