trigger-dev

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's advanced-reference.md shows webhook handling (webhooks.constructEvent and the Stripe webhook example) and wait.forToken with token.url (pre-signed HTTP POST) which explicitly ingest arbitrary external/user-provided data that the agent is expected to process and can drive task triggers and subsequent actions.