slack
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it reads and processes data from Slack, which is an untrusted external source.
- Ingestion points: The
readMessagesaction inSKILL.mdingests message content from Slack channels and DMs into the agent's context. - Boundary markers: The skill does not provide boundary markers or instructions for the agent to distinguish between its own system instructions and potentially malicious commands embedded in Slack messages.
- Capability inventory: The skill possesses significant capabilities, including
sendMessage,editMessage,deleteMessage, and managing pins, which could be abused if an attacker influences the agent's behavior through a Slack message. - Sanitization: There is no evidence of sanitization or content filtering to identify or mitigate embedded instructions within the message stream.
Audit Metadata