truto-jsonata

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly evaluates JSONata against arbitrary integration responses and inbound webhook payloads (e.g., config.response_mapping, environment.override.webhook.payload_transform, dynamic pagination and run_if expressions in usage-in-truto.md) so untrusted third‑party content from integration APIs or webhooks is read and can directly change control flow or subsequent tool actions.