Oracle ADK Expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Slackbot integration clearly consumes arbitrary user-generated messages (event["text"]) and passes them directly to agent.execute in the "Slackbot Integration" snippet, exposing the agent to untrusted third-party content that could carry indirect prompt injections.