setting-up-support-slack-locally
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to run
ngrokandcloudflaredcommands to create public tunnels for local development. This is a standard procedure for testing inbound webhooks from SaaS providers like Slack. - [EXTERNAL_DOWNLOADS]: Recommends the use of well-known and reputable third-party services, including
ngrokandcloudflared, for establishing temporary network tunnels during development. - [PROMPT_INJECTION]: The skill configures the application to receive and process messages from Slack channels and mentions, creating a surface for indirect prompt injection if the ingested content is subsequently processed by an AI agent.
- Ingestion points: The
/api/conversations/v1/slack/eventsendpoint processesmessage.channels,message.groups, andapp_mentionevents from the Slack API. - Boundary markers: No explicit instructions for implementing boundary markers or prompt delimiters for the ingested message content are provided in this setup guide.
- Capability inventory: The application is granted Slack scopes such as
chat:writeandchat:write.customize, allowing it to respond to Slack threads based on processed events. - Sanitization: The skill provides a troubleshooting script that demonstrates the validation of Slack HMAC signatures (
X-Slack-Signature) to verify the authenticity of incoming requests.
Audit Metadata