look-into-it

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow’s required runtime path reads an outsider-authored Slack thread (slack_read_thread) and then digests its free-form text into the agent context for the subsequent “Digest → Understand …” steps, creating an indirect prompt-injection surface.