📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills slack-automation
📦
slack-automation
Content revision r1 Medium Risk ⚙️ External commands🌐 Network access
Automate Slack Workflows with Rube MCP
Slack operations often require repeated searches, message updates, and channel checks. This skill guides AI agents through Rube MCP workflows for reliable Slack automation.
Supports: Claude Codex Code(CC)
This skill is part of a pack
Install the whole pack to get every skill the task needs, in one command.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "slack-automation" from https://skillstore.io/skills/sickn33-slack-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-slack-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "slack-automation". Send a launch reminder to #marketing.
Expected outcome:
The skill resolves #marketing, posts the approved reminder, and returns the channel plus message timestamp for follow-up edits.
Using "slack-automation". Find messages about a delayed release from last week.
Expected outcome:
The skill searches Slack, opens relevant threads, and summarizes matching conversations with channel names and message times.
Using "slack-automation". React to the deployment complete message with a check mark.
Expected outcome:
The skill locates the target message, verifies the channel and timestamp, then adds the requested reaction.
Security Audit
Medium Riskv4 • 7/7/2026 Open versioned report
Most static command findings are false positives caused by Markdown code spans around Slack and Rube tool names, not executable shell commands. The real residual risk is the intentional third-party Rube MCP connection, which can process Slack OAuth, workspace messages, and user data. No prompt injection or malicious social engineering was found in SKILL.md.
1
Files scanned
190
Lines analyzed
1
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Third-Party Slack Data Exposure
The skill instructs users to add Rube MCP, connect Slack OAuth, search messages, and list users. This expected design routes Slack workspace content and identity data through a third-party MCP provider.
The cited lines directly show the third-party MCP endpoint, Slack OAuth connection, workspace message search, and user listing workflows. The finding is about the trust boundary, not malicious intent.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
Line 20 instructs users to configure the external https://rube.app/mcp MCP endpoint. This is a real third-party network dependency for Slack OAuth and automation data flows.
Risk Factors
⚙️ External commands (93)
SKILL.md:15 SKILL.md:16 SKILL.md:20 SKILL.md:23 SKILL.md:24 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:40 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:46 SKILL.md:47 SKILL.md:50 SKILL.md:51 SKILL.md:53 SKILL.md:54 SKILL.md:61 SKILL.md:62 SKILL.md:63 SKILL.md:64 SKILL.md:67 SKILL.md:68 SKILL.md:69 SKILL.md:70 SKILL.md:73 SKILL.md:74 SKILL.md:75 SKILL.md:76 SKILL.md:77 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:87 SKILL.md:88 SKILL.md:89 SKILL.md:92 SKILL.md:93 SKILL.md:94 SKILL.md:97 SKILL.md:98 SKILL.md:99 SKILL.md:100 SKILL.md:107 SKILL.md:108 SKILL.md:109 SKILL.md:110 SKILL.md:111 SKILL.md:112 SKILL.md:115 SKILL.md:116 SKILL.md:117 SKILL.md:118 SKILL.md:123 SKILL.md:124 SKILL.md:131 SKILL.md:132 SKILL.md:135 SKILL.md:136 SKILL.md:137 SKILL.md:141 SKILL.md:147 SKILL.md:148 SKILL.md:149 SKILL.md:153 SKILL.md:154 SKILL.md:155 SKILL.md:158 SKILL.md:159 SKILL.md:160 SKILL.md:164 SKILL.md:165 SKILL.md:166 SKILL.md:167 SKILL.md:168 SKILL.md:170 SKILL.md:176 SKILL.md:177 SKILL.md:178 SKILL.md:179 SKILL.md:180 SKILL.md:181 SKILL.md:182 SKILL.md:183 SKILL.md:184 SKILL.md:185 SKILL.md:186 SKILL.md:187 SKILL.md:188 SKILL.md:189
🌐 Network access (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-slack-automation/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-slack-automation?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-slack-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-slack-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-slack-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). slack-automation security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-slack-automation/audits/4BibTeX citation
@techreport{sickn33-sickn33-slack-automation-2026,
author = {sickn33},
title = {slack-automation security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-slack-automation/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "slack-automation security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-slack-automation/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-slack-automation:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance
What You Can Build
Coordinate Incident Updates
Post clear status updates, reply in existing threads, and preserve message timestamps for later edits.
Find Engineering Context
Search Slack for release, deployment, or incident discussions and expand the most relevant threads.
Schedule Team Announcements
Resolve the correct channel, prepare announcement text, and schedule delivery within Slack limits.
Try These Prompts
Send a Channel Update
Post this message to #team-updates: The maintenance window starts at 18:00 UTC. Confirm the channel before sending.
Find a Conversation Thread
Search Slack for recent messages about the payment incident in #support, then open the most relevant thread.
Schedule an Announcement
Schedule a reminder in #release for tomorrow at 09:00 UTC about the release checklist review.
Review Workspace Signals
Find messages from the last seven days about failed deployments, group them by channel, and suggest which threads need follow-up.
Best Practices
- Confirm channel and user identity before any write action.
- Use thread timestamps when replying so updates stay attached to the right conversation.
- Honor Retry-After responses and paginate until Slack returns no cursor.
Avoid
- Posting to channels based only on display names or partial matches.
- Reading broad message history when a scoped search would answer the task.
- Ignoring Slack OAuth scope errors or rate-limit responses.
Frequently Asked Questions
What does this skill automate?
It guides Slack message posting, search, thread handling, reactions, scheduling, channel lookup, and user lookup through Rube MCP.
Does it require Slack authorization?
Yes. The user must connect Slack through Rube MCP and complete Slack OAuth before workflows can run.
Can it access private channels?
Only when the connected Slack account or app has access and the required OAuth scopes are granted.
Can it send direct messages?
Yes. It can resolve users, open or reuse a DM channel, and send the approved message.
Does the skill store Slack data?
The skill file does not define data storage. Users should review Rube, Composio, and Slack data handling policies.
What should teams verify before use?
Teams should confirm the third-party MCP trust boundary, granted Slack scopes, and approval rules for write actions.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
9f814fc6a43fd99946f2da5e0df231c65a38bc76
Maintenance freshness
7/18/2026
Usage
7 downloads · 86 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
lark-im
80Manage Lark Messages and Chats
by larksuite
Teams need controlled access to Lark messages, chats, files, and cards from AI tools. This skill guides Claude, Codex, and Claude Code through lark-cli workflows with clear permission boundaries.
Communication View
📦
lark-event
79Stream Lark Events for Real-Time Workflows
by larksuite
Real-time Lark workflows need reliable event streams, filtering, and clean shutdown behavior. This skill guides AI agents through bounded event consumption with lark-cli.
Communication View
📦
slack-gif-creator
78Create Slack-Ready Animated GIFs
by anthropics
Slack GIFs can fail when dimensions, file size, or frame timing are wrong. This skill helps create, optimize, and validate GIFs for Slack.
Communication View
📦
lark-doc
87Manage Lark Docs and Feishu Wiki Content
by larksuite
Teams need reliable document updates without switching between tools. This skill guides Claude, Codex, and Claude Code through authenticated lark-cli workflows for Lark Docs.
Office & Reports View
📦
pptx
85Create PowerPoint Presentations with Python
by AutumnsGrove
Building polished PowerPoint decks by hand is slow and hard to repeat. This skill guides Claude, Codex, and Claude Code through PPTX creation, editing, and automation with python-pptx.
Office & Reports View
📦
building-agents
85Build Claude Code Agents
by C0ntr0lledCha0s
Creating reliable AI agents requires clear schemas, safe tools, and repeatable review steps. This skill guides agent design, validation, migration, and maintenance for Claude Code workflows.
Coding & Development View