gas-slack-bot

SUSPICIOUS: the skill’s core purpose is coherent, but it grants an AI agent broad authenticated browser control over Slack and Google, persists sensitive tokens in .env, and depends on another external skill first. There is no clear credential-harvesting or off-platform exfiltration behavior, so this is not malicious, but it is medium risk due to transitive trust and autonomous account actions.