slack

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's Slack functionality matches its stated purpose, and there is no installer or unverifiable binary risk. However, all Slack data and actions are routed through Maton's intermediary gateway and managed OAuth service instead of Slack's official API endpoints, creating notable data-flow and trust concerns; combined with the ability to take consequential Slack actions, this makes the skill medium risk rather than benign.

Confidence: 88%Severity: 64%
Audit Metadata
Analyzed At
Apr 2, 2026, 12:29 PM
Package URL
pkg:socket/skills-sh/openclaw%2Fskills%2Fslack%2F@93dcbc8a51417645d6dad938553384c8c31b679a