slack-bot-builder
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill provides templates for processing untrusted external data from Slack events and third-party incident reports which are then rendered in Slack UI components.
- Ingestion points: Slack event payloads (
message,body) and incident data structures inSKILL.md. - Boundary markers: The provided code examples do not include specific delimiters or instructions to ignore embedded commands within the dynamic content.
- Capability inventory: The templates utilize
say()andclient.views_open()to output text back to Slack workspaces. - Sanitization: No escaping or input validation is demonstrated beyond a character limit truncation for the incident description field.
Audit Metadata