ai-ecoverse/advanced-skills
Quarantined high-risk skills (browser session capture, WebSocket interception) for Slack and Microsoft Teams. Install only after reviewing the security implications.
94%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The required workflow for Slack message reading and searching (e.g., `slack history`, `slack search`, `slack activity`, `slack monday`, and `slack watch`) ingests outsider-authored free text from Slack channels and DMs.
Where we found it
app.slack.com
domain · 4 sites
The plugin's core commands (slack history, slack search, slack activity, slack monday, slack watch, slack thread, slack pending) all fetch messages from Slack channels and DMs via app.slack.com, ingesting outsider-authored free text that the agent then acts on.
SKILL.md
91
requires an open Slack tab at `app.slack.com`; without one the script errors and
references/endpoints.md
3
Base URL: `/api/` (same-origin XHR from `app.slack.com`)
65
Auto-detected from the active Slack tab URL: `https://app.slack.com/client/<ID>/...`
671
2026-09-29 on an Enterprise Grid, XHR from the `app.slack.com` page with the **org-level** token
edgeapi.slack.com
domain · 1 site
The plugin fetches user search results from edgeapi.slack.com at runtime (for slack find), ingesting user profile data authored by workspace members.
SKILL.md
424
(`edgeapi.slack.com/cache/<team>/users/search`) behind Slack's own quick switcher
files.slack.com
domain · 1 site
The plugin downloads files shared in Slack threads from files.slack.com at runtime (slack download), fetching outsider-authored file content that the agent may then view or act on.
SKILL.md
380
fetches the bytes authenticated inside the Slack tab (`files.slack.com` needs the session cookie)
adobe-dx-support.enterprise.slack.com
domain · 2 sites
The slack-support command scrapes the server-rendered Slack Support Portal at adobe-dx-support.enterprise.slack.com, ingesting outsider-authored help request text and comment threads that the agent acts on.
references/support-portal.md
6
(`adobe-dx-support.enterprise.slack.com`). It scrapes the server-rendered portal
references/support-portal.md
39
`adobe-dx-support.enterprise.slack.com` — no separate token
- Audited
- Security analysis