slack-agent
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFE
Full Analysis
- Standard Command Execution: The skill utilizes commands such as
pnpm install,pnpm lint, andpnpm testto manage dependencies and enforce code quality standards during the development process. These are expected within a developer-focused utility. - Trusted External Resources: The setup wizard clones a project template from the Vercel Partner Solutions GitHub repository and fetches model metadata from the Vercel AI Gateway. These are trusted vendor resources essential for the skill's primary function of scaffolding Slack applications.
- Secure Credential Management: The skill includes clear guidance on configuring sensitive credentials using environment variables and provides automated checks to ensure
.envfiles are correctly listed in.gitignoreto prevent accidental exposure. - Input Validation and Sanitization: It provides development patterns for verifying Slack request signatures and protecting cron endpoints using secret tokens, which helps defend against unauthorized access and improves the overall security of the generated applications.
Audit Metadata