paypro-global-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow ingests free-text outsider-authored form fields from an HTTP POST webhook endpoint (e.g., POST /webhooks/paypro-global reading req.body / request.form() / req.formData()), which can include attacker-controlled values like IPN_TYPE_NAME and other parameters before verification/dispatch.