slack-workflows

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Slack Workflows Skill presents a coherent, purpose-aligned set of capabilities: automating Slack-based notifications, standups, approvals, onboarding, incident response, and cross-platform sync. It leverages Slack primitives and interfaces with common enterprise systems. The footprint is proportionate to its claim, with careful attention needed to credential management, data privacy, and access scopes across interconnected systems. No obvious download/execute, credential-harvesting, or exfiltration patterns are evident; however, explicit handling of tokens, secrets, input validation, and least-privilege configurations should be documented in deployment guidelines to avoid potential security gaps. Overall, the skill is BENIGN with MEDIUM risk considerations pending secure credential management practices.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 08:23 AM
Package URL
pkg:socket/skills-sh/claude-office-skills%2Fskills%2Fslack-workflows%2F@65ffb2cd02b542c624539ab9363f3ffb7b4fa270