pd-slack-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md and resources/pd-slack.ts define a "triage" command that fetches and summarizes Slack channel messages (user-generated, third-party content) which the agent reads and uses to inform triage decisions, so external message content could indirectly inject instructions.