resend

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). In agent-email-inbox, the runtime webhook handler for email.received calls resend.emails.receiving.get(event.data.email_id) and then passes emailContent.text/html (outsider-authored email body) into agent.processEmail(...), which becomes LLM context for the agent.