The Agent Skills Directory

[COMMAND_EXECUTION]: The skill facilitates the execution of Slack CLI (slack) commands to manage app lifecycles, including project initialization, deployment, and workspace operations. It explicitly warns to confirm targets before executing state-changing commands.
[EXTERNAL_DOWNLOADS]: The skill references official Slack developer documentation (docs.slack.dev) to ensure command syntax and flags are current. These are documented as well-known and trusted sources.
[PROMPT_INJECTION]: The skill identifies a potential surface for indirect prompt injection as it ingests untrusted data from the environment via slack help and slack manifest info (SKILL.md). While explicit boundary markers and sanitization for this output are absent, the skill mitigates risk by restricting capabilities to the Slack tool and emphasizing manual confirmation for sensitive actions.
[CREDENTIALS_UNSAFE]: The skill mentions the --token flag and environment variable management (slack env), which are standard features of the Slack CLI. There are no instructions to exfiltrate or hardcode these credentials; instead, it follows standard CLI usage patterns.

slack-cli