slack-bot-builder

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses environment variables (os.environ) for all sensitive credentials including Slack bot tokens and signing secrets, following secure configuration management practices.
  • [SAFE]: The code snippets leverage official, well-known libraries (slack-bolt and slack-sdk) provided by Slack, reducing the risk of third-party dependency compromise.
  • [SAFE]: The 'Sharp Edges' section provides explicit security guidance to developers, such as avoiding hardcoded tokens and requesting minimal scopes, which enhances the overall security posture of apps built with this skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 03:28 PM
Security Audit — agent-trust-hub — slack-bot-builder