slack-webhook-alerter — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited slack-webhook-alerter (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when a Python script needs to post a status or result to Slack and you do not want the full Slack SDK or a bot token - an incoming webhook is enough. It builds a Block Kit message with a colored attachment (green/red by status) and posts it with a stdlib request, retrying on transient failures. It mirrors telegram-alerter so the same run can fan out to both channels.
User input:
After my nightly job finishes, post a green or red Slack message with the item count and a dashboard link.Output:
# Copy assets/slack_alert.py into your project, then:
from slack_alert import send_slack
ok = send_slack(
title="Nightly scrape finished",
text="Processed 42 items in 18 minutes.",
status="ok", # ok -> green, error -> red, warn -> yellow
fields={"Items": "42", "Duration": "18m"},
link=("Open dashboard", "https://example.com/dash"),
)
if not ok:
print("Slack delivery failed after retries")The helper reads SLACK_WEBHOOK_URL from the environment. The webhook URL is itself a secret (it grants posting to that channel), so it is never hardcoded.
SLACK_WEBHOOK_URL only - it is a secret, treat it like a token.header + section block for the title and body, and a fields list for key/value pairs.Reference: assets/slack_alert.py.
Distilled from production use across the author's automation projects. v1.0.0. See also: [[telegram-alerter]], [[http-retry-session]], [[pipeline-orchestrator]].
→ Build the full runnable bot with Trawlkit.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.