Slack AI data exfiltration from private channels via indirect prompt injection
promptarmor.substack.com