A suggestions page connected to a Slack hook can create a prompt-injection path through which an agent with data access may exfiltrate an organization's codebase.

“you know i mean like i think there are actually a lot of ways where you can like i know you have like a suggestions like page you know where you people can submit suggestions and that goes into a hook in your slack and someone's prompt injected it you know i mean and now you've like exfiltrated your code base out because you know like or the agent has like like been prompt injected and it has all this access to your data and so the more like important your organization harness you”