slack-a2a-rooms
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
grepto verify the presence of security seams in existing project files before application. This is a defensive check to ensure the environment is compatible and will not break upon installation. - [SAFE]: The skill implements a robust bot-inbound guard policy that defaults to dropping all bot-authored messages. It explicitly requires an operator to allowlist specific Slack channel IDs in the
SLACK_A2A_ROOMSenvironment variable. - [SAFE]: Data exfiltration and looping risks are mitigated by a mandatory
SLACK_A2A_MAX_HOPSlimit, which stops bot-to-bot conversations after a set number of messages unless a human intervenes. The budget is tracked per-room and per-bot-identity. - [SAFE]: The
open-a2a-room.tsscript interacts with the Slack API using official endpoints (slack.com/api) to facilitate room creation. It uses standard environment variable conventions for token management and does not log sensitive credentials.
Audit Metadata