utila-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes—at runtime the required webhook handler reads the incoming HTTP request body (outsider-authored Utila delivery free-form JSON/text) via express.raw()/request.body()/request.arrayBuffer() and parses it into event, which then becomes part of the agent’s execution context for any downstream LLM/tooling.