slack-api
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches API method indices and documentation from official Slack domains (
docs.slack.dev) to ensure it uses the correct method contracts and required scopes. - [COMMAND_EXECUTION]: The skill provides templates for executing
curlcommands to interact with the Slack Web API atslack.com/api/. These commands include appropriate headers for authentication and content type. - [SAFE]: The skill implements strong security posture through several instructions:
- It explicitly warns against hardcoding bearer tokens in code or sharing them in plain text.
- It requires the agent to confirm state-changing or destructive actions (such as
chat.postMessage,delete, oradmin.*methods) with the developer before execution. - It mandates verification of method names and scopes against live documentation pages to prevent guessing or hallucinations.
Audit Metadata