Slack

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a straightforward Slack-control skill, but it gives the agent broad ability to read, send, edit, delete, pin, and unpin Slack content without clear approval or scope limits.

Before installing, confirm you trust this skill to operate in your Slack workspace. Limit the Slack bot token’s scopes and channel access, and use explicit confirmation for sending, editing, deleting, pinning, or unpinning messages.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could send, edit, delete, pin, or unpin Slack content if invoked with the configured Slack tool, which may affect team-visible communications.

Why it was flagged

The skill enables Slack message mutation and pin-management actions by default, including destructive or public workspace changes, without instructions requiring confirmation, channel limits, or rollback guidance.

Skill content
| messages | enabled | Read/send/edit/delete | ... | pins | enabled | Pin/unpin/list |
Recommendation

Install only if you want Clawdbot to have these Slack controls, and require explicit user approval for send, edit, delete, pin, and unpin actions.

What this means

The skill’s real reach depends on the permissions granted to the configured Slack bot token.

Why it was flagged

A Slack bot token is expected for a Slack-control skill, but it represents delegated workspace authority and the artifacts do not spell out the token scopes or workspace boundaries.

Skill content
The tool uses the bot token configured for Clawdbot.
Recommendation

Review the Clawdbot Slack app scopes and restrict it to the minimum channels and actions needed.