slack
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a shell command snippet to fetch the Slack API changelog and search for breaking changes using
curlandgrep. This is a routine task for developers to monitor API changes.- [EXTERNAL_DOWNLOADS]: The skill fetches data fromapi.slack.com, which is an official Slack domain. This is consistent with the skill's purpose of engineering Slack integrations and uses a well-known service.- [CREDENTIALS_UNSAFE]: The skill references the use ofSLACK_SIGNING_SECRETvia environment variables (process.env.SLACK_SIGNING_SECRET) and provides specific advice against hardcoding tokens, following security best practices for secret management.
Audit Metadata