add-slack
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like
git fetch,pnpm install, andpnpm run buildto set up the integration. These are standard operations for adding features to a codebase. - [EXTERNAL_DOWNLOADS]: Installs the
@chat-adapter/slackpackage at a specific version (4.26.0) from the NPM registry. This follows best practices for dependency management. - [CREDENTIALS_UNSAFE]: The skill correctly instructs the user to store sensitive tokens and secrets in a
.envfile rather than hardcoding them. It uses generic placeholders (e.g.,xoxb-your-bot-token) in the documentation. - [SAFE]: No malicious patterns, data exfiltration, or obfuscation were detected. The skill performs a legitimate integration task as described in its metadata.
Audit Metadata