slack-voice-interface
Warn
Audited by Snyk on Mar 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill ingests user-generated Slack voice clips (transcribed by OpenClaw) and explicitly treats those transcripts as normal input for NetClaw to invoke infrastructure tools (pyATS, NetBox, ServiceNow), so untrusted message content can directly influence tool use and actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata