connector-slack
Connect Caffeine Canisters to Slack
Caffeine canisters need secure Slack messaging without custom HTTP and authentication code. This skill provides an experimental client setup, token guidance, and Motoko examples.
설치 전에 중지하고 확인을 요청하세요.
계획을 검토하고 파일을 변경하기 전에 사용자의 명시적 동의를 받으세요.
내 에이전트로 설치
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
Review the Skillstore skill "connector-slack" from https://skillstore.io/skills/caffeinelabs-connector-slack.md and its manifest at https://skillstore.io/api/skills/caffeinelabs-connector-slack/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
에이전트가 읽기 쉬운 리소스
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
테스트해 보기
"connector-slack" 사용 중입니다. Post deployment alerts to the engineering channel as the application.
예상 결과:
- Selected a bot token because messages should represent the application.
- Required scope: chat:write.
- Invite the Slack app to the engineering channel before testing.
"connector-slack" 사용 중입니다. Allow support leads to send approved incident updates to two Slack channels.
예상 결과:
- Store the token through the administrator-only setter.
- Require the support-lead permission before each post.
- Allow only the two approved channel identifiers and apply rate limits.
"connector-slack" 사용 중입니다. Assess whether this connector is ready for production.
예상 결과:
The connector remains experimental. Verify response decoding, add sender authorization, test Slack error handling, rotate secrets, and monitor rate limits before production use.
보안 감사
높은 위험All 65 external-command alerts are false positives caused by Markdown backticks and code fences; no Ruby or shell backtick execution exists. The three hardcoded URLs point to official Slack properties and match the connector's declared purpose. The example exposes posting to every authenticated caller, enabling unauthorized Slack messages under the configured workspace credential.
확인된 보안 우려 사항 (1)
위험 요인
⚙️ 외부 명령어 (50)
🌐 네트워크 접근 (3)
이 보고서 공유 및 인용
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
보고서 링크 복사
https://skillstore.io/skills/caffeinelabs-connector-slack/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 배지
[](https://skillstore.io/skills/caffeinelabs-connector-slack?utm_source=security_passport_badge)HTML 배지
<a href="https://skillstore.io/skills/caffeinelabs-connector-slack?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/caffeinelabs-connector-slack/security.svg" alt="Skillstore security assessment" loading="lazy"></a>임베드 카드
<iframe src="https://skillstore.io/embed/skills/caffeinelabs-connector-slack.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>학술 인용 (APA · BibTeX · CFF)
APA 인용
caffeinelabs. (2026). connector-slack security audit report (audit version 1) [Author version 0.0.3]. Skillstore. https://skillstore.io/skills/caffeinelabs-connector-slack/audits/1BibTeX 인용
@techreport{caffeinelabs-caffeinelabs-connector-slack-2026,
author = {caffeinelabs},
title = {connector-slack security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/caffeinelabs-connector-slack/audits/1},
note = {Author version 0.0.3}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "connector-slack security audit report (audit version 1)"
version: "0.0.3"
type: report
authors:
- name: "caffeinelabs"
date-released: "2026-08-19"
url: "https://skillstore.io/skills/caffeinelabs-connector-slack/audits/1"
identifiers:
- type: other
value: "skillstore:caffeinelabs-connector-slack:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 점수
이 점수의 이유 증거 신뢰도: 중간만들 수 있는 것
Add Application Alerts
Send operational notifications from a Caffeine application to a designated Slack channel.
Secure Workspace Setup
Configure a workspace token, minimal scopes, channel membership, and administrator-only secret updates.
Prototype Slack Workflows
Test bot or user message identity before committing to a production integration.
이 프롬프트를 사용해 보세요
Add Slack notifications to my Caffeine canister. Use a bot token and post [message] to [channel]. Explain the required setup.
Compare bot and user tokens for [workflow]. Recommend one, list required Slack scopes, and explain identity and channel access consequences.
Implement administrator-only Slack token configuration and authenticated posting. Restrict senders to [role], allow [channels], and avoid exposing the token.
Design a production hardening plan for this experimental connector. Cover authorization, rate limits, retries, response decoding, observability, secret rotation, and tests.
모범 사례
- Prefer bot tokens unless a workflow explicitly requires a person's Slack identity.
- Grant only required Slack scopes and limit posting to approved channels.
- Protect token updates and message posting with separate role permissions.
피하기
- Do not expose Slack tokens to the frontend, logs, URLs, or generated output.
- Do not permit every authenticated caller to post with a shared workspace credential.
- Do not present the pre-release connector as production-ready without runtime tests.
자주 묻는 질문
Which Slack token should I use?
Which Slack scope is required for posting?
Must the Slack app join the channel?
Does the skill support per-user OAuth?
Is this connector production-ready?
How should posting access be protected?
개발자 세부 정보
작성자
caffeinelabs라이선스
MIT
작성자 버전
v0.0.3
Skillstore 리비전
r1
참조
7fd79e91da5a0cc369dfba10b3e8ca2534c9aff8
유지보수 최신성
2026. 8. 19.
사용량
0 다운로드 · 0 조회
파일 구조
📄 SKILL.md