create-slack-app
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the Slack CLI (
slack-cli). These commands are standard for project scaffolding and environment configuration (e.g.,slack create,slack env set). - [EXTERNAL_DOWNLOADS]: The skill references official Slack sample repositories (e.g.,
slack-samples/bolt-js-starter-template). Since these belong to the official Slack GitHub organization and are used for project initialization as intended, they are considered safe. - [CREDENTIALS_UNSAFE]: The skill asks the user for API keys (e.g.,
ANTHROPIC_API_KEY) to configure the newly created app. It correctly instructs the user to set these via the CLI and includes a warning not to log or echo the values, following best practices for local development configuration.
Audit Metadata