slack-link
Warn
Audited by Socket on Aug 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated Slack-context purpose is plausible, but the skill depends on an unverifiable `jc-slack` binary that handles authentication and routes reads/posts through an opaque gateway rather than a visible official Slack API flow. The capability is aligned to purpose, yet the install trust and credential/data-flow integrity are disproportionate enough to classify it as high security risk rather than benign.
Confidence: 87%Severity: 86%
Audit Metadata