slack

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Slack runtime workflow reads outsider-authored free text from a user-controlled Slack workspace surface (e.g., channel message text via conversations.history and search results via search.messages) using the scripts/slack-cli reads that are driven by the user’s query/scope before any mutation.