create-slack-app
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied strings and interpolates them into shell commands, creating a surface for command injection if malicious input is provided.
- Ingestion points: User responses to
AskUserQuestionfor project names, sandbox names, passwords, and API keys inSKILL.md. - Boundary markers: None identified for the shell command interpolations.
- Capability inventory: Execution of shell commands via the Slack CLI (e.g.,
slack create,slack env set,slack sandbox create). - Sanitization: No sanitization or validation of user-provided arguments is specified before execution.
- [COMMAND_EXECUTION]: The skill executes various Slack CLI commands to manage authentication, workspaces, and project scaffolding. It specifically handles sensitive credentials like passwords and API keys by passing them as command-line arguments, which may expose them to local process monitoring tools.
- [EXTERNAL_DOWNLOADS]: The skill downloads project templates from the official
slack-samplesorganization on GitHub using the Slack CLI'screatecommand.
Audit Metadata