treezor-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text enters the LLM context via the runtime webhook request body: the workflow parses arbitrary inbound JSON from Treezor (untrusted external party) using JSON.parse/json.loads and then uses the resulting fields in logging/switching; e.g., examples/express/src/index.js reads req.body.toString('utf8') and parses it into event, and the contents (like webhook/object_id derived from that body) become readable strings.