Slack Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Slack Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Tiny MCP server that exposes one tool over stdio or HTTP:
post_slack_message posts text to the Slack channel ID provided by the callerSet these before starting the server:
export SLACK_BOT_TOKEN="xoxb-..."The Slack app needs chat:write and must be allowed to post in the target channel.
Optional for the HTTP server:
export PORT="3000"The HTTP server does not perform app-level authentication. Deploy it only where the managed agent runtime or private network controls who can reach the endpoint.
node server.jsclaude mcp add slack-message \
--env SLACK_BOT_TOKEN="$SLACK_BOT_TOKEN" \
-- node /Users/agruning/Documents/MCP/slack-message-mcp/server.jsClaude managed agents and the Claude API MCP connector cannot connect to local stdio servers. Deploy the HTTP server behind a public HTTPS URL:
npm run start:httpThe MCP endpoint is:
POST /mcpHealth check:
GET /healthClaude managed agent / Messages API shape:
{
"mcp_servers": [
{
"type": "url",
"url": "https://your-domain.example.com/mcp",
"name": "Slack"
}
],
"tools": [
{
"type": "mcp_toolset",
"mcp_server_name": "Slack",
"default_config": {
"enabled": false
},
"configs": {
"post_slack_message": {
"enabled": true
}
}
}
]
}Use the beta header required by Anthropic's MCP connector:
anthropic-beta: mcp-client-2025-11-20Tool call arguments:
{
"channel": "C0123456789",
"text": "Hello from MCP"
}~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.