Slack OpenAPI Skill

• Analyzed: May 11, 2026, 6:45 AM
• Findings: 1
• Version: 1.0.0
• Hash: 65de0795983d84cb8f20892edda6a9bd398d86c91e89b63abbf0a4ce651c3cab
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate interface for interacting with the Slack Web API via the uxc tool. It includes a curated OpenAPI schema (slack-web.openapi.json), clear documentation for authentication using Slack bot and user tokens, and a validation script (validate.sh) to ensure configuration integrity. The instructions in SKILL.md and usage-patterns.md focus on standard messaging operations and include explicit guardrails, such as requiring user confirmation for write operations, with no evidence of malicious intent, data exfiltration, or prompt injection.