slack-daily-digest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md the required workflow searches Slack for user-provided channel names/topics via slack_search_channels/slack_search_public_and_private, then reads the resulting messages using slack_read_channel/slack_read_thread, so outsider-authored Slack message text in those channels can be ingested at runtime.