instantly-webhooks-events
Warn
Audited by Snyk on May 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill directly ingests webhook payloads from the third‑party Instantly service (see SKILL.md: the /webhooks/instantly handler) which contain user-generated fields like reply_text, reply_sentiment, and bounce_type that are parsed and used to update CRM, send Slack notifications, delete leads, and drive other actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata