slack-block-kit-builder

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a development tool for validating Slack Block Kit JSON payloads. It provides a local validation script (scripts/validate-block-kit.mjs) that performs static analysis on JSON input to ensure compliance with Slack's schema, limits, and surface compatibility rules.
  • [COMMAND_EXECUTION]: The skill provides instructions to run a local script using node. The commands node "$SKILL_DIR/scripts/validate-block-kit.mjs" "$BLOCK_KIT_PAYLOAD" and the equivalent pipe command are standard for using local utility scripts included with a skill. The script only processes the provided JSON data and does not perform any dangerous operations like shell injection or network access.
  • [NO_CODE]: While the skill includes a Node.js script, it is a standalone validator with no external dependencies (imports only node:fs, node:path, and node:url). It does not download external code or packages.
  • [DATA_EXFILTRATION]: The validator script operates entirely locally on the provided input and does not make any network requests. The documentation includes links to official Slack documentation (docs.slack.dev and app.slack.com), which are well-known and trusted services.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 09:35 PM