slack-gif-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly accepts and opens user-uploaded images ("Working with User-Uploaded Images" and the example uploaded = Image.open('file.png')), which are untrusted user-generated content the agent is expected to read or process as part of its workflow.