raisindb-functions-triggers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly documents an "http" trigger type (inbound webhooks) and shows functions reading event payloads (context.flow_input, message body) and also exposes fetch()/raisin.http methods, so untrusted external/webhook content can be ingested and directly drive function actions and state changes.