📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills slack-bot-builder
📦
slack-bot-builder
Content revision r1 Safe ⚙️ External commands🌐 Network access📁 Filesystem access🔑 Env variables
Build Slack Apps with Bolt
Slack apps require secure event handling, OAuth flows, and polished interactive UI. This skill guides Claude, Codex, and Claude Code through Bolt patterns, Block Kit layouts, commands, events, and installation workflows.
Supports: Claude Codex Code(CC)
This skill is part of a pack
Install the whole pack to get every skill the task needs, in one command.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "slack-bot-builder" from https://skillstore.io/skills/sickn33-slack-bot-builder.md and its manifest at https://skillstore.io/api/skills/sickn33-slack-bot-builder/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "slack-bot-builder". Create a slash command for support tickets.
Expected outcome:
A workflow outline with command acknowledgement, modal fields, submission handling, and secure storage notes.
Using "slack-bot-builder". Design an incident alert message.
Expected outcome:
- Header with incident severity and title.
- Fields for service, owner, status, and reported time.
- Action buttons for acknowledgement and escalation.
Using "slack-bot-builder". Review OAuth setup for a public Slack app.
Expected outcome:
A production checklist covering minimal scopes, workspace token storage, state validation, and installation recovery paths.
Security Audit
Safev4 • 7/7/2026 Open versioned report
AI review found the external command findings are Markdown code fences, not executable backticks. The Slack reference URL, environment variable reads, modal call, and enterprise_id field are normal Slack app documentation patterns. No prompt injection, exfiltration intent, or semantic abuse was found.
1
Files scanned
265
Lines analyzed
0
Review items
0
False positives ignored
Risk Factors
⚙️ External commands (5)
🌐 Network access (1)
📁 Filesystem access (1)
🔑 Env variables (6)
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-slack-bot-builder/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-slack-bot-builder?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-slack-bot-builder?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-slack-bot-builder/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-slack-bot-builder.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). slack-bot-builder security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-slack-bot-builder/audits/4BibTeX citation
@techreport{sickn33-sickn33-slack-bot-builder-2026,
author = {sickn33},
title = {slack-bot-builder security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-slack-bot-builder/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "slack-bot-builder security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-slack-bot-builder/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-slack-bot-builder:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance
What You Can Build
Launch a Workspace Bot
Create a Slack bot that handles messages, commands, and interactive modals for an internal workspace.
Design Incident Workflows
Build Block Kit alerts with severity details, action buttons, and clear acknowledgement flows.
Plan Public App Installation
Map OAuth scopes, installation storage, and workspace-specific token handling for a distributed Slack app.
Try These Prompts
Create a Basic Bot
Create a basic Slack Bolt app that replies to hello messages. Use Python and explain the required environment variables.
Design a Block Kit Alert
Design a Block Kit message for incident notifications with severity, service, owner, and action buttons. Keep text within Slack limits.
Build a Slash Command Flow
Build a slash command workflow that opens a ticket modal, validates required fields, and acknowledges the command quickly.
Plan OAuth for Many Workspaces
Plan a multi-workspace OAuth installation flow for a public Slack app. Include scopes, token storage, state validation, and rollout risks.
Best Practices
- Store Slack tokens in environment variables or a secret manager, never in source control.
- Acknowledge Slack commands and events within three seconds before long processing.
- Request only the Slack scopes required for the current workflow.
Avoid
- Hardcoding bot tokens, signing secrets, or OAuth client secrets in generated code.
- Requesting broad Slack scopes before a feature needs them.
- Using Socket Mode as the default for production public apps without deployment review.
Frequently Asked Questions
Which Slack frameworks does this skill cover?
It focuses on Slack Bolt patterns for Python, JavaScript, and Java.
Can it create Block Kit layouts?
Yes. It guides message, modal, and Home tab layouts using Slack Block Kit concepts.
Does it handle OAuth installation flows?
Yes. It explains scopes, installation storage, and workspace-specific token handling.
Does it deploy the Slack app?
No. It helps design and generate app patterns, but deployment remains your responsibility.
How should secrets be managed?
Use environment variables or a secret manager, and avoid storing secrets in source control.
Can it support production Slack apps?
Yes, when you add production storage, observability, deployment, and Slack app configuration.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
9f814fc6a43fd99946f2da5e0df231c65a38bc76
Maintenance freshness
7/18/2026
Usage
8 downloads · 183 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
building-commands
84Build Claude Code Slash Commands
by C0ntr0lledCha0s
Teams need repeatable AI workflows that are easy to invoke and review. This skill helps create, update, validate, and document Claude Code slash commands.
Coding & Development View
📦
slash-command-encoder
82Create Slash Commands for AI Workflows
by DNYoussef
Repeated AI workflows are slow when users rely on long natural language prompts. This skill helps define concise slash commands with routing, validation, chaining, and help text.
Productivity View
📦
command-creator
79Create Claude Code Slash Commands
by softaworks
Reusable AI workflows are hard to write consistently. This skill guides Claude, Codex, and Claude Code through designing, writing, and refining slash commands.
Coding & Development View
📦
slack-gif-creator
79Create Slack-Ready Animated GIFs
by davila7
Slack GIFs often exceed size or dimension limits. This skill builds, optimizes, and validates animated GIFs for Slack messages and custom emoji.
Design & Creative View
📦
rn-auth
78Implement Expo Authentication Flows
by CJHarmath
Expo authentication often fails because OAuth redirects, token storage, and route guards must align across app and backend. This skill provides concrete React Native patterns for Google sign-in, secure token handling, protected routes, and backend token verification.
Coding & Development View
📦
better-auth-best-practices
77Configure Better Auth Securely
by better-auth
Authentication setup often fails through mismatched adapters, session storage, plugins, or environment settings. This skill provides focused Better Auth configuration and security guidance.
Coding & Development View