slack

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is purpose-aligned for Slack operations, but it grants an AI agent broad, state-changing communication powers and file transfer capability. The main concern is not obvious malware or credential theft; it is the combination of unspecified CLI provenance and autonomous real-world actions in Slack, including deletes and external invites.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Apr 7, 2026, 10:39 PM
Package URL
pkg:socket/skills-sh/discountry%2Fritmex-skills%2Fslack%2F@5f554ceff4cdc2f6acc51602fd3d1fd8ce287634