slack-agent

Pass

Audited by Gen Agent Trust Hub on Feb 24, 2026

Risk Level: SAFE
Full Analysis
  • Standard Command Execution: The skill utilizes commands such as pnpm install, pnpm lint, and pnpm test to manage dependencies and enforce code quality standards during the development process. These are expected within a developer-focused utility.
  • Trusted External Resources: The setup wizard clones a project template from the Vercel Partner Solutions GitHub repository and fetches model metadata from the Vercel AI Gateway. These are trusted vendor resources essential for the skill's primary function of scaffolding Slack applications.
  • Secure Credential Management: The skill includes clear guidance on configuring sensitive credentials using environment variables and provides automated checks to ensure .env files are correctly listed in .gitignore to prevent accidental exposure.
  • Input Validation and Sanitization: It provides development patterns for verifying Slack request signatures and protecting cron endpoints using secret tokens, which helps defend against unauthorized access and improves the overall security of the generated applications.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 24, 2026, 05:02 PM