slack
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through external data ingestion.
- Ingestion points: The
readMessagesaction inSKILL.mdallows the agent to read content from Slack channels. - Boundary markers: There are no specific delimiters or instructions provided to the agent to treat retrieved message content as untrusted data or to ignore embedded commands.
- Capability inventory: The skill has the ability to write to the environment via
sendMessage,editMessage,deleteMessage, andpinMessageactions. - Sanitization: No content filtering or sanitization logic is described for the data retrieved from Slack.
Audit Metadata