slack
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses environment variables (
$SLACK_BOT_TOKEN,$SLACK_BOT_TOKEN_2) for authentication, adhering to secure secret management practices. - [SAFE]: Network communications are restricted to the official Slack API domain (
slack.com). - [PROMPT_INJECTION]: The skill processes untrusted data from Slack messages and search results, which constitutes an indirect prompt injection surface. This is a characteristic of all communication integration skills.
- Ingestion points: Slack message history via
getChannelHistoryand search results viasearchMessages(SKILL.md). - Boundary markers: Not explicitly defined in the instruction set.
- Capability inventory: Primarily read operations for messages, channel lists, and user/bot metadata.
- Sanitization: None described in the provided documentation.
Audit Metadata