An indirect prompt-injection email processed by Anthropic's Claude Cowork through a Gmail connector can exfiltrate Slack tokens into an HTML draft.
An indirect prompt-injection email processed by Anthropic's Claude Cowork through a Gmail connector can exfiltrate Slack tokens into an HTML draft.