slack-mrkdwn
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of documentation and instructions for the AI agent on how to correctly format strings for Slack's various rendering fields.
- [NO_CODE]: No executable scripts, binaries, or configuration files that trigger code execution were found in the skill package.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process untrusted user content, it explicitly instructs the agent to escape control characters (
&,<,>) and warns against the risks of data exfiltration via Slack unfurls for LLM-generated URLs, providing clear mitigation strategies. The instructions correctly emphasize content sanitization and least-privilege link behavior.
Audit Metadata