sendgrid-webhooks

Warn

Audited by Snyk on Mar 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill directly ingests untrusted third‑party SendGrid webhook POSTs (see /webhooks/sendgrid handlers in examples/express/src/index.js, examples/fastapi/main.py, and examples/nextjs/app/webhooks/sendgrid/route.ts), parsing JSON event payloads and branching on event types to drive processing (e.g., unsubscribe, bounce, click), so externally provided content can materially influence behavior.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 1, 2026, 04:29 PM