Security audit
Slackbot
Security checks across malware telemetry and agentic risk
Overview
This Slack integration is broad and powerful, but its Slack access, OAuth use, install steps, and write/destructive capabilities are disclosed and aligned with its purpose.
Install only if you intend to grant Slack workspace access through ClawLink. Review the Slack OAuth permission screen carefully, use the least-privileged workspace/account practical, and confirm high-impact actions such as message deletion, file deletion, public file sharing, channel/member changes, user group updates, and canvas deletion before running them.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
54/54 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.