velt-rest-apis-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill instructs agents to ingest and handle user-generated content from Velt (e.g., comment and CRDT payloads via REST endpoints like https://api.velt.dev/v2/commentannotations/get and incoming webhook endpoints described in the Webhooks sections), which the agent is expected to read/interpret as part of its workflow and could therefore allow indirect prompt injection from third‑party users.