slack
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The provided Node.js code template processes input from Slack slash commands (
command.text) which could originate from untrusted workspace users. - Ingestion points: Slack slash command input (
command.text) inSKILL.mdused for status reports. - Boundary markers: None explicitly present in the example code to delimit the user-supplied text from the UI blocks.
- Capability inventory: The skill uses the Slack Web API to post messages and create interactive components.
- Sanitization: The template demonstrates safety by using
encodeURIComponentwhen interpolating the user input into a URL. - [EXTERNAL_DOWNLOADS]: The skill references the installation of the official Slack Bolt framework via
npm i @slack/boltand interacts with Slack's official API endpoints.
Audit Metadata