slack-agent
Audited by Runlayer on Feb 27, 2026
Malicious tool definition detected
--- ## Step 3.2: Verify .gitignore Ensure credentials won't be committed: ```bash # Check .gitignore includes .env grep -q "^\.env" .gitignore || echo ".env" >> .gitignore ``` --- ## Next Phase Once the environment is configured, proceed to [Phase 4: Test Locally](./4-test-locally.md).
Malicious tool definition detected
**Values:** - `debug` - All logs including debug info - `info` - Standard operational logs - `warn` - Warnings and errors only - `error` - Errors only **Default:** `info` --- ## Local Development Setup Create a `.env` file in your project root: **Using Vercel AI Gateway (recommended):** ```env # Required - Slack credentials only SLACK_BOT_TOKEN=xoxb-your-token-here SLACK_SIGNING_SECRET=your-signing-secret # Development tunnel NGROK_AUTH_TOKEN=your-ngrok-token # Optional NODE_ENV=development LOG_
Malicious tool definition detected
-> Redeploy > > **Note for AI configuration:** > - **Using Vercel AI Gateway?** No AI API keys needed - it handles authentication automatically. > - **Using a direct provider SDK?** Also add your provider's API key (e.g., `OPENAI_API_KEY`, `ANTHROPIC_API_KEY`).
Malicious tool definition detected
**Pull environment variables** (optional but recommended): ```bash vercel env pull .env.local ``` **Why this is required:** - Vercel AI Gateway uses OIDC tokens for authentication - Running `vercel link` connects your local project to the Vercel platform - This enables the `@ai-sdk/gateway` package to authenticate without API keys - Without this step, AI calls will fail with authentication errors **Note:** You'll complete the full deployment in Phase 5. This step just establishes the connection
Tool passed security scan
Malicious tool definition detected
Malicious tool definition detected
**Solutions:** 1. Use Vercel's Edge Functions where possible 2. Optimize bundle size 3. Consider Vercel's Pro tier for reduced cold starts ## Production Checklist Before going live: - [ ] Environment variables configured for Production - [ ] Slack Request URLs updated to production domain - [ ] Webhook verification successful - [ ] Test message/mention working - [ ] Error handling in place - [ ] Logging configured for debugging - [ ] Rate limiting considered - [ ] Separate production Slack app f
Malicious tool definition detected
## Features - **Interactive Setup Wizard**: Step-by-step guidance from project creation to production deployment - **Quality Standards**: Embedded testing and code quality requirements - **AI Integration**: Support for Vercel AI Gateway and direct provider SDKs - **Comprehensive Patterns**: Slack-specific development patterns and best practices - **Testing Framework**: Vitest configuration and sample tests ## Installation ### Via skills.sh (Recommended) npx skills add vercel-labs/slack-agent-ski
Tool passed security scan
Tool passed security scan
Passed Files (14)Click to expand
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan