Slack Block Kit
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Potential for indirect prompt injection as the skill processes external sales data (e.g., transcripts, CRM notes) to generate Slack notifications.
- Ingestion points: The
datainput parameter inSKILL.mdreceives message-specific content from external sales workflows. - Boundary markers: Documentation in
references/block-types-and-limits.mdspecifies the use ofsafeMrkdwn()andsafeHeaderText()helpers to wrap content. - Capability inventory: The skill utilizes the
slackcapability and executes POST requests to asend-slack-messageedge function. - Sanitization: Implements safety wrappers (
safeButtonText,safeFieldText) for text truncation and Slack-specific formatting safety.
Audit Metadata