Slack Coaching Query
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted user input from Slack messages to generate sales coaching advice.\n
- Ingestion points: The
raw_queryandobjection_typeinputs take text directly from Slack messages as seen in the triggers and input configuration.\n - Boundary markers: There are no explicit delimiters or instructions within the Claude Haiku system prompt to ignore instructions potentially embedded within the user's objection description.\n
- Capability inventory: The skill has
crmcapabilities used to fetch pipeline snapshots, deal lists, risk scores, and meeting data viaexecute_action.\n - Sanitization: No validation or sanitization of the user-provided text is performed before it is used in the AI prompt or included in the Slack Block Kit output.
Audit Metadata