slack-bot-builder
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is instructional in nature, providing boilerplate code and design patterns for Slack bot development. No malicious patterns or injection attempts were identified.- [SAFE]: Promotes secure credential management by instructing users to use environment variables (
os.environ) rather than hardcoding secrets, and includes a 'Sharp Edges' section specifically warning against token exposure.- [SAFE]: Includes a detailed security section that identifies common pitfalls such as missing OAuth state validation (CSRF) and requesting excessive scopes, providing correct remediation examples for each.- [SAFE]: All identified dependencies (slack-bolt, slack-sdk, flask, cryptography) are well-known, industry-standard libraries for their respective tasks.
Audit Metadata