slack-bot-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow is Slack Bolt event/command handling (e.g., @app.message / @app.command), which ingests message text and other user-provided content from Slack events into the agent’s context; this content is authored by non-operating users (outsiders) and can include free text that may be used for indirect prompt injection.