slack-block-kit-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the required runtime workflow runs the bundled local validator (scripts/validate-block-kit.mjs) over the user-supplied/block-payload JSON it is given, and that JSON can contain outsider-authored free text fields like section/markdown text without any step that selects a specific trusted item before ingestion.