persona-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes—this skill’s required runtime workflow ingests outsider-authored free text from Persona webhook HTTP requests: the raw request body is read as rawBody/request.text() and then JSON.parsed to obtain fields like eventName/object.id (e.g., examples/express/src/index.js:82-98, examples/nextjs/app/webhooks/persona/route.ts:80-114).