skills/acedatacloud/skills/slack/Gen Agent Trust Hub

slack

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses curl and jq to interact with the official Slack Web API at slack.com, which is a well-known and trusted service. Communication is conducted over HTTPS to the official API endpoints.
  • [SAFE]: Authentication is handled via the $SLACK_TOKEN environment variable, following standard security practices for credential management in automated environments. No hardcoded credentials were found.
  • [SAFE]: The skill demonstrates safe data handling by using jq --arg for parameter interpolation in shell commands. This is a best practice that prevents common command injection vulnerabilities and ensures JSON payload integrity when constructing API requests.
  • [SAFE]: All external references and operations are aligned with the skill's stated purpose of Slack management, and file uploads follow the official two-step Slack API protocol.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 12:52 PM