slack-automation

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s Slack read/write capabilities fit its stated purpose, but all data and actions are funneled through a third-party MCP/provider rather than directly to Slack, and the referenced Rube endpoint appears deprecated. This is not confirmed malware, but it carries medium security risk due to intermediary credential/data handling and service trust uncertainty.

Confidence: 89%Severity: 51%
Audit Metadata
Analyzed At
Oct 8, 2026, 08:59 PM
Package URL
pkg:socket/skills-sh/davepoon%2Fbuildwithclaude%2Fslack-automation%2F@1aad679c1642b344cc6a1a385a56046b3f7968e1121b41b47024cb02986a85ce