internal-comms

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow for 3P updates and newsletters instructs the agent to gather information by reading Slack posts/messages and emails from within the company (potentially including outsider-authored content submitted by users into those channels), before drafting communications.