Review this outbound webhook helper

Situation

Gemini generated an endpoint that lets integrations trigger outbound callbacks.

Environment

Python FastAPI service runs inside the application VPC. Integration callbacks should go only to registered partner endpoints.

Select suspicious lines in the terminal to flag them before submitting your verdict.

pending review

@router.post("/webhooks/trigger")
async def trigger_webhook(payload: WebhookPayload):
    async with httpx.AsyncClient() as client:
        response = await client.post(
            payload.url,
            json=payload.data,
            timeout=30.0
        )
    return {"status": response.status_code}

@router.get("/webhooks/health")
async def webhook_health():
    return {"status": "ok"}