slack-bot-builder
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a developer guide for Slack application development, providing best-practice templates for event handling and UI components.
- [SAFE]: Code snippets correctly utilize environment variables for sensitive credentials like SLACK_BOT_TOKEN and SLACK_SIGNING_SECRET, avoiding hardcoded secrets.
- [SAFE]: The OAuth pattern implementation highlights the importance of persistent installation storage and state validation to prevent cross-site request forgery (CSRF) during the installation flow.
- [SAFE]: Mentions of security 'Sharp Edges' provide valid advice on token management, scope minimization, and the appropriate use of Socket Mode.
- [SAFE]: References to external resources are limited to official Slack development tools like the Block Kit Builder.
Audit Metadata