velt-chat-sdk-adapter-best-practices
Warn
Audited by Snyk on Jun 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The required runtime workflow ingests Velt webhook POST payloads (including outsider-authored comment text and author names) into the adapter via
getChat().webhooks.velt(request, ...), which then passes that parsed free text into the agent/handlers/LLM context (e.g.,message.textinonNewMention/onSubscribedMessage).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata