twilio-sendgrid-inbound-parse
Warn
Audited by Snyk on May 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill receives arbitrary inbound email content from external senders via SendGrid Inbound Parse (fields like
from,subject,text,html, and attachments are posted to your webhook as shown in SKILL.md), which is untrusted user-generated content that the agent is expected to read and act on as part of email-to-app workflows.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata