slack-expert

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate instructions and templates for Slack platform development using the official @slack/bolt SDK and standard Slack Web APIs.
  • [SAFE]: It explicitly promotes security best practices by advising against hardcoded credentials and recommending the use of environment variables for sensitive data like SLACK_BOT_TOKEN and SLACK_SIGNING_SECRET.
  • [SAFE]: The guidance includes mandatory implementation of request signature verification (HMAC with SHA256) to ensure that incoming requests originate from Slack, which is a key security control.
  • [SAFE]: Example interactions demonstrate safe usage of TypeScript and the Bolt SDK, including proper error handling with try/catch blocks and logging.
  • [SAFE]: Tools requested (Read, Write, Edit, Bash, WebFetch) are consistent with the stated purpose of analyzing, writing, and testing code for Slack integrations.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 08:31 AM
Security Audit — agent-trust-hub — slack-expert