resend

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow shown in Quick Receive (Node.js) reads outsider-authored webhook/event text via const payload = await req.text() and then retrieves the email body (resend.emails.receiving.get(event.data.email_id)), so freeform email content can reach the agent without selecting a specific item first.