slack-api
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references official libraries for Slack integration and development tools.
- Evidence: Installation of
slack-bolt,slack-sdk, andpython-dotenvfrom standard Python package registries. - Additional tools like
ngrokare suggested for local development, which is a well-known and trusted service in this context. - [PROMPT_INJECTION]: The skill provides templates for handling external input from Slack, creating a potential surface for indirect prompt injection.
- Ingestion points: Handler functions in
SKILL.mdandREADME.mdprocess data from Slack message events, slash commands, and interactive modal submissions. - Boundary markers: The examples include basic character escaping but do not implement specific delimiters for isolating untrusted data from AI instructions.
- Capability inventory: The provided bot patterns have permissions to post messages (
chat_postMessage), update content, and interact with external webhooks. - Sanitization: Includes a utility for escaping special characters (
&,<,>) and validation logic for input fields in modals.
Audit Metadata