slack-formatting — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited slack-formatting (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
When responding to Slack channels, use Slack's mrkdwn syntax instead of standard Markdown.
Check your group folder name or workspace path:
slack_ (e.g., slack_engineering, slack_general)/workspace/group/ path for slack_ prefix| Style | Syntax | Example |
|---|---|---|
| Bold | *text* | bold text |
| Italic | _text_ | _italic text_ |
| Strikethrough | ~text~ | ~strikethrough~ |
| Code (inline) | ` code ` | inline code |
| Code block | `code` | Multi-line code |
<https://example.com|Link text> # Named link
<https://example.com> # Auto-linked URL
<@U1234567890> # Mention user by ID
<#C1234567890> # Mention channel by ID
<!here> # @here
<!channel> # @channelSlack supports simple bullet lists but NOT numbered lists:
• First item
• Second item
• Third itemUse • (bullet character) or - or * for bullets.
> This is a block quote
> It can span multiple linesUse standard emoji shortcodes: :white_check_mark:, :x:, :rocket:, :tada:
## headings (use *Bold text* for headers instead)**double asterisks** for bold (use *single asterisks*)[text](url) links (use <url|text> instead)1. numbered lists (use bullets with numbers: • 1. First)--- horizontal rules*Daily Standup Summary*
_March 21, 2026_
• *Completed:* Fixed authentication bug in login flow
• *In Progress:* Building new dashboard widgets
• *Blocked:* Waiting on API access from DevOps
> Next sync: Monday 10am
:white_check_mark: All tests passing | <https://ci.example.com/builds/123|View Build>*bold* not **bold**<url|text> not [text](url)• bullets, avoid numbered lists:emoji: shortcodes>~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.