igrantio-verifier-backend

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the reference verifier backend, outsider-authored free text is ingested at runtime via references/src/webhooks.ts where POST /webhook reads the raw request body (rawBody), parses it as JSON, and stores payload.data before sseRouter streams it to clients.