fynt-workflow-platform-core

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill clearly ingests untrusted third-party content via the webhook endpoint (assets/snippets/webhook-route-contract.ts and the webhook contract in references/backend-execution-contracts.md / source-pattern-map), where request.json() payloads from arbitrary external sources are parsed and used to create/enqueue runs that can drive execution behavior.