writing-internal-comms

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required 3P-updates workflow, the agent is instructed to gather information from Slack posts (and similar internal sources), meaning outsider-authored text submitted by users to monitored Slack channels could be ingested and used to draft communications.