slack-bot-builder
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses environment variables (
os.environ) for all sensitive credentials including Slack bot tokens and signing secrets, following secure configuration management practices. - [SAFE]: The code snippets leverage official, well-known libraries (
slack-boltandslack-sdk) provided by Slack, reducing the risk of third-party dependency compromise. - [SAFE]: The 'Sharp Edges' section provides explicit security guidance to developers, such as avoiding hardcoded tokens and requesting minimal scopes, which enhances the overall security posture of apps built with this skill.
Audit Metadata