slack

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md defines actions like "readMessages" and references using Slack message context (channelId/messageId), meaning the agent will fetch and read user-generated Slack messages (untrusted third-party content) as part of its workflow, which could contain instructions that influence subsequent actions.