resend-inbound

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md describes a runtime webhook handler that verifies and then retrieves email body/attachments via Resend APIs (email content and attachment filenames/body are outsider-authored by senders), which would be ingested into the agent/LLM context if the workflow passes email.html/email.text or downloaded attachment text to the LLM.