slack-automation

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides instructions for interacting with the Slack API via the Rube MCP server (a vendor resource for marcelo-michelson). It outlines standard workflows for messaging, searching, and managing channels.
  • [EXTERNAL_DOWNLOADS]: The skill references the Rube MCP server at https://rube.app/mcp. This is a vendor-owned resource consistent with the author's identity and does not represent a security risk.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates reading and searching Slack messages, which constitutes an attack surface for indirect prompt injection. However, it is an intended core functionality, and no exploitable capabilities (like command execution or writing to the filesystem) are present to escalate the risk. Standard boundary marker best practices are recommended for implementations using this skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 07:57 PM