Linear Webhooks (Verify, Replay, DLQ)

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime path app.use("/linear/webhook", express.raw({ type: "application/json" })) ingests raw HTTP webhook request bodies authored by Linear’s webhook sender (i.e., an external user-controlled source), which the agent processes directly into events and stores/uses (including DLQ payloads).