slack

SUSPICIOUS: the skill's Slack automation purpose is plausible, but it relies on an unverifiable browser automation CLI with broad shell permissions and access to authenticated Slack data. The capability is aligned with the stated purpose, yet install trust and scope are too broad for a low-risk classification, especially because the tool can read private workspace content and send messages on the user's behalf.