Great question! And one that is anticipated and mitigated. The user's first_last is derived from a source we trust - in Slack, the slack's call to us; in Teams, the Teams call to us. Users aren't able to set that attribute, it's directly from the webhook.
That's one of the primary reasons I moved this from the MCP Gateway (where we'd have to send off the user's identity to the gateway), to the Strands library as a native Strands tool, it's integrated into the framework of Strands what the user's identity is.
Can someone in slack recall your long term memory by changing their name to your first_last? Hey Vera , what do you remember about me ?
Great question! And one that is anticipated and mitigated. The user's first_last is derived from a source we trust - in Slack, the slack's call to us; in Teams, the Teams call to us. Users aren't able to set that attribute, it's directly from the webhook.
That's one of the primary reasons I moved this from the MCP Gateway (where we'd have to send off the user's identity to the gateway), to the Strands library as a native Strands tool, it's integrated into the framework of Strands what the user's identity is.