Assistants can see images from Slack, and skills are scanned for prompt injection

An assistant triggered from Slack now reads the images attached to the message, and can fetch images referenced later in a thread, so screenshots stop being dead weight in a conversation. Skill manifests are scanned for prompt injection the moment they're captured, with findings shown on skill details, and an organization whose trial ends lands on a page that says so instead of a generic gate.

Features

• Assistants see images shared in Slack #4361 - Images attached to a triggering message travel with the turn as vision content, validated against an image allowlist, and a new asset inspection tool lets the assistant fetch an image referenced later in the thread through a short-lived sealed download URL. Image bytes live only in the live inference path and are never persisted at rest. (Author: @claude[bot])
• Slack attachments are visible to triggers #4358 - Messages that share files surface each attachment's name, type, and size in the turn context, and the file list is addressable from trigger filters, so a trigger can route on "message with a file" without fetching contents. (Author: @claude[bot])
• Skills are scanned for prompt injection #5031 - Captured skill manifests are judged against your Prompt Injection policy at capture time, current-version findings appear on skill details, and admins can configure the policy from the Skills page. Scanning never fails an upload, and an unavailable judgement retries later rather than passing as clean. (Author: @svadrutk)
• Ended trials land on an upgrade page #5108 - An organization whose enterprise trial has ended sees a page that says so and books an upgrade call, and anyone still inside a trial can reach it early from the sidebar countdown. Admins also receive lifecycle emails when a trial starts and as it approaches expiration (#5043). (Author: @alx-xo)
• Internal: groundwork and dashboard scaffolding #4360 - The assistant runtime's message representation widened to structured content parts, which is what the Slack image support above builds on. A signals endpoint landed backing a risk monitoring page that ships behind a flag in the next release (#5104), and the dashboard gained a shared page-template layer with about 34 pages migrated onto it (#5094). (Author: @claude[bot])

Bug fixes

• Assistants pick up runtime updates automatically #5120 - A regularly used assistant could keep its admission-time runtime image forever. Deploys now recycle stale runtimes lazily at turn admission, so assistants roll onto the current image without waiting for an idle window. (Author: @danielkov)
• Skill share pages resolve on custom domains #5088 - Custom domain routing now covers shared skill pages, which previously returned an edge 404. Existing domains pick up the route on their next settings save. (Author: @simplesagar)