attio-webhooks-events

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md's "Event Handler" shows the service accepts Attio webhook POSTs to /webhooks/attio and parses event payloads (e.g., note content, object.api_slug) which are third-party/user-generated and are used to drive actions like syncRecordToCRM, reindexRecord, and forwardToNotionSync, so untrusted webhook content can materially influence behavior.