imessage-convex-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required runtime path ingests outsider-authored free text from a third-party iMessage sender via the Sendblue webhook JSON (content → parseSendblueInbound → processInbound prompt/agent inputs), which is then fed into the LLM (agent.generateText / replyText prompt variable).