slack-expert
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructions and templates for Slack platform development using the official @slack/bolt SDK and standard Slack Web APIs.
- [SAFE]: It explicitly promotes security best practices by advising against hardcoded credentials and recommending the use of environment variables for sensitive data like
SLACK_BOT_TOKENandSLACK_SIGNING_SECRET. - [SAFE]: The guidance includes mandatory implementation of request signature verification (HMAC with SHA256) to ensure that incoming requests originate from Slack, which is a key security control.
- [SAFE]: Example interactions demonstrate safe usage of TypeScript and the Bolt SDK, including proper error handling with
try/catchblocks and logging. - [SAFE]: Tools requested (Read, Write, Edit, Bash, WebFetch) are consistent with the stated purpose of analyzing, writing, and testing code for Slack integrations.
Audit Metadata