slack-post
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
slack-postbinary from the vendor's official GitHub repository (berrydev-ai/agent-cli-tools) and Homebrew tap. These are recognized vendor distribution channels.\n- [COMMAND_EXECUTION]: Executes shell commands for installation (curl,tar,brew,git,make,install) and tool operation (slack-post). These are expected for a CLI-based integration.\n- [CREDENTIALS_UNSAFE]: The skill manages Slack bot tokens (SLACK_POST_BOT_TOKEN). Although it provides guidance against persisting tokens, some examples show passing them as command-line flags, which could expose secrets in process lists or shell history. Using environment variables is the safer alternative provided.
Audit Metadata