add-slack
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard build and test commands (
pnpm run build,pnpm exec vitest) to verify the installation. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill interacts with the official Slack API (
slack.com/api/auth.testandslack.com/api/conversations.open) to validate credentials and resolve channel IDs. These are legitimate operations for a Slack integration. - [CREDENTIALS_UNSAFE]: The skill correctly instructs the user to store sensitive tokens (
SLACK_BOT_TOKEN,SLACK_APP_TOKEN,SLACK_SIGNING_SECRET) in a.envfile rather than hardcoding them in the source code. This is a standard security best practice.
Audit Metadata