add-slack
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches additional source code and test suites from the author's GitHub repository (
github.com/qwibitai/nanoclaw-slack.git) to implement the Slack channel functionality. - [COMMAND_EXECUTION]: Performs several system-level operations for installation and maintenance, including: 1. Git operations to fetch and merge the Slack integration branch. 2. Dependency installation and build processes using
npm. 3. Service management usinglaunchctlto restart the agent. 4. Database inspection usingsqlite3to verify channel registration. - [PROMPT_INJECTION]: Enables a new communication channel that processes untrusted input from Slack users, creating a surface for indirect prompt injection. 1. Ingestion points: Slack events API (as implemented in
src/channels/slack.ts). 2. Boundary markers: Not specified in the installation instructions; depends on implementation in the merged code. 3. Capability inventory: The agent has capabilities for command execution (viasetup/index.ts), file system access, and network communication via the Slack API. 4. Sanitization: Not documented in the setup process; sanitization would be expected within the SlackChannel implementation.
Audit Metadata