slack-block-kit-builder
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a development tool for validating Slack Block Kit JSON payloads. It provides a local validation script (
scripts/validate-block-kit.mjs) that performs static analysis on JSON input to ensure compliance with Slack's schema, limits, and surface compatibility rules. - [COMMAND_EXECUTION]: The skill provides instructions to run a local script using
node. The commandsnode "$SKILL_DIR/scripts/validate-block-kit.mjs" "$BLOCK_KIT_PAYLOAD"and the equivalent pipe command are standard for using local utility scripts included with a skill. The script only processes the provided JSON data and does not perform any dangerous operations like shell injection or network access. - [NO_CODE]: While the skill includes a Node.js script, it is a standalone validator with no external dependencies (imports only
node:fs,node:path, andnode:url). It does not download external code or packages. - [DATA_EXFILTRATION]: The validator script operates entirely locally on the provided input and does not make any network requests. The documentation includes links to official Slack documentation (
docs.slack.devandapp.slack.com), which are well-known and trusted services.
Audit Metadata