slack
Warn
Audited by Snyk on Mar 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill exposes the agent to user-generated Slack content (e.g., via the documented "Get Conversation History" and "Search Messages" actions and the membrane action run / request flows), meaning the agent will fetch and interpret third-party messages that could contain instructions influencing its subsequent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata