agent-slack

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's Slack capabilities mostly match its stated purpose, but it relies on high-risk unofficial credential acquisition from Slack Desktop/browser sessions and gives an AI agent broad authority to take organization-visible actions. The installer is only a moderate supply-chain concern if the stablyai repo is official, but the credential model and autonomous action surface make this a high security-risk skill.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
Apr 23, 2026, 06:40 AM
Package URL
pkg:socket/skills-sh/letta-ai%2Fskills%2Fagent-slack%2F@e941d1147d0034a985479fc5736c8298ff39acc4