slack-post

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow posts whatever free text the caller supplies via --prompt (or positional message text) to Slack using resolvePostRequest(...).text and postMessage(...body: JSON.stringify({..., text: params.text})), so outsider-authored text is ingested without any content selection step.