tachyon-slack-notify — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tachyon-slack-notify (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use the installed tachyon CLI to verify real notification delivery through Tachyon's /v1/chat/send path. Prefer concrete execution evidence over code-only conclusions.
tachyon --versionExpect tachyon 0.5.3 or newer for nested --tenant-id support. If older, ask whether to update, or run the repo's release/update workflow if the user explicitly requested it.
tachyon org operators list --jsonIf this fails after switching to a forbidden tenant, recover by switching back to a known accessible tenant.
tachyon ops slack send --tenant-id <tenant_id_or_alias> --text "Codex test notification from tachyon CLI" --jsonops slack is an alias for ops notify. Both should call POST /v1/chat/send.
{"accepted": true} means Tachyon accepted the notification and dispatched asynchronously.400 No active chat destinations or Slack connection found. means the tenant is reachable but Slack/Discord destination is not configured.403 PermissionDenied: You do not have permission for this tenant means the current profile can switch to or name that tenant but cannot send in that tenant.Token refreshed successfully are normal and are not delivery failures.These tenant IDs were useful during the successful verification on 2026-05-01:
tn_01hjryxysgey07h5jz5wagqj0m Tachyon dev tenant; may return 403 for this profile
tn_01kptmrtgnm746m5mpr78e2esd THE WAN STANDARD; previously reachable but no Slack destination
tn_01kp2qf7ans8eyzb08b6jr3xf7 cowork; previously reachable but no Slack destination
tn_01knxxebcd2ecv4fjbtzac510p MOVERENT; previously returned {"accepted": true}Do not assume these are always current. Prefer tachyon org operators list --json first, then fall back to known IDs when the list command is blocked by the saved tenant context.
Use:
tachyon switch tachyon
tachyon switch <tenant_id>After testing a tenant that returns 403, restore the saved tenant to a reachable tenant so future commands do not get stuck:
tachyon switch tn_01knxxebcd2ecv4fjbtzac510p~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.