n8n-expression-syntax

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly instructs the agent to read and use user-provided webhook payloads (the Webhook node .body) and referenced HTTP Request node JSON (e.g., $node["HTTP Request"].json.data) as inputs to expressions that drive downstream actions (Slack messages, URLs), so it clearly consumes untrusted third‑party content that could influence behavior.