slack-standup-digest

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The skill reads Slack message history from user-defined channels using the Slack Model Context Protocol (MCP) to generate standup summaries. This access is restricted to the specific channels provided by the user during setup.
  • [COMMAND_EXECUTION]: The skill uses curl to send configuration data to the vendor's automation API. These requests use environment variables for host URLs and authentication keys, which is a secure and standard practice for platform integration.
  • [CREDENTIALS_UNSAFE]: No hardcoded secrets or credentials were found. Authentication is handled via the $OPENHANDS_AUTOMATION_API_KEY environment variable as per the platform's security guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 08:20 AM
Security Audit — agent-trust-hub — slack-standup-digest