slack-gif-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Slack GIF Creator skill ingests outsider-authored free text via user-supplied GIF animation parameters (e.g., “Draw your animation …” and “Draw text on a frame” takes arbitrary text: str, then PIL renders it at runtime), so an outsider can submit poison text through the user request path without the agent selecting a specific trusted item first.