pipedrive-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill’s required runtime workflow is an HTTP webhook handler (Express/FastAPI/Next.js examples) that ingests free-form JSON from OUTSIDER=Pipedrive delivery bodies (e.g., body.meta.action, body.meta.entity, and req.body/await request.json()), which is attacker-controlled text sent to the endpoint.