agent-slack
Warn
Audited by Socket on Apr 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's Slack capabilities mostly match its stated purpose, but it relies on high-risk unofficial credential acquisition from Slack Desktop/browser sessions and gives an AI agent broad authority to take organization-visible actions. The installer is only a moderate supply-chain concern if the stablyai repo is official, but the credential model and autonomous action surface make this a high security-risk skill.
Confidence: 86%Severity: 78%
Audit Metadata