slack

SUSPICIOUS. The skill’s Slack-reading and posting capabilities broadly match its stated purpose, and the visible network destinations are official Slack domains. The main concern is disproportionate credential handling: it instructs users to extract browser session tokens (xoxc/xoxd) manually and feed them into an unverified local CLI whose source/provenance is not shown here. That is not confirmed malware, but it is a high-trust design with meaningful credential and account-action risk.