slack-link

Warn

Audited by Socket on Aug 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated Slack-context purpose is plausible, but the skill depends on an unverifiable `jc-slack` binary that handles authentication and routes reads/posts through an opaque gateway rather than a visible official Slack API flow. The capability is aligned to purpose, yet the install trust and credential/data-flow integrity are disproportionate enough to classify it as high security risk rather than benign.

Confidence: 87%Severity: 86%
Audit Metadata
Analyzed At
Aug 9, 2026, 05:04 PM
Package URL
pkg:socket/skills-sh/joelhooks%2Fjoelclaw%2Fslack-link%2F@0252a6843a1d21c7c53ce8d8c8b4224c8ea911c30a6390ed2a2136fb9439a396
Security Audit — socket — slack-link