skills/qwibitai/nanoclaw/add-slack/Gen Agent Trust Hub

add-slack

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands like git fetch, pnpm install, and pnpm run build to set up the integration. These are standard operations for adding features to a codebase.
  • [EXTERNAL_DOWNLOADS]: Installs the @chat-adapter/slack package at a specific version (4.26.0) from the NPM registry. This follows best practices for dependency management.
  • [CREDENTIALS_UNSAFE]: The skill correctly instructs the user to store sensitive tokens and secrets in a .env file rather than hardcoding them. It uses generic placeholders (e.g., xoxb-your-bot-token) in the documentation.
  • [SAFE]: No malicious patterns, data exfiltration, or obfuscation were detected. The skill performs a legitimate integration task as described in its metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 07:52 PM