resonate-http-service-design-python

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime path ingests outsider-authored free text via HTTP routes that accept request bodies/payloads (e.g., @app.post("/webhooks/approval/{order_id}") reads payload: dict and feeds it into r.promises.resolve), enabling indirect prompt injection if the downstream worker LLM consumes that resolved value.