ClawHub
Back to skill

Security audit

Slack消息中枢LITE

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Slack helper for sending channel messages and listing public channels, with expected Slack token use disclosed.

Install only if you intend the agent to send content to Slack using a bot token. Review the target channel and message text before sending, keep the bot token in an environment variable, and grant only the needed Slack scopes such as chat:write and channels:read.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill instructs the agent to send Slack messages over the network but does not prominently require explicit user awareness and confirmation that message contents will be transmitted to an external service. In an agent context, this can cause unintended disclosure of sensitive internal text, prompts, or operational data to Slack.

Static analysis

No suspicious patterns detected.