secure_slack_bot — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited secure_slack_bot (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill sends messages to Slack channels without exposing webhook URLs or bot tokens. All credentials are stored and retrieved securely from MGC Blackbox, ensuring zero plaintext secrets and zero accidental leaks.
Start MGC:
mgc| Item | Value |
|---|---|
| Port | 57219 |
| Token Path | ~/.mgc/database/mgc_black_box/.mgc_token |
| Start Command | mgc |
{
"webhook_url": "https://hooks.slack.com/services/T.../B.../xxxx",
"bot_token": "xoxb-...",
"default_channel": "#general"
}| Field | Required | Description |
|---|---|---|
| webhook_url | No* | Slack Incoming Webhook URL |
| bot_token | No* | Bot User OAuth Token |
| default_channel | No | Default channel name |
\ At least one* of webhook_url or bot_token must be provided.
Store credentials in MGC:
mgc_save info_type=config info_owner=slack_bot < slack_config.jsoninfo_typeandinfo_ownerare identifiers you define yourself, used to retrieve encrypted data from MGC.
Send a Slack message using credentials stored in MGC.
| Name | Type | Required | Description |
|---|---|---|---|
| text | string | Yes | Message text |
| channel | string | No | Target channel |
| username | string | No | Custom bot name |
| icon_emoji | string | No | Emoji icon (e.g., :robot:) |
| info_type | string | No | MGC info_type (default: config) |
| info_owner | string | No | MGC info_owner (default: slack_bot) |
{
"success": true,
"message": "Message sent"
}from mcp import MCPClient
client = MCPClient("http://localhost:57219")
result = client.call_tool("send_slack_message", {
"text": "Deployment complete!",
"channel": "#deployments",
"username": "Deploy Bot",
"icon_emoji": ":rocket:"
})
print(result)python example.py -t "Hello Slack"
python example.py -t "Hello" -c "#general"Mock mode (no real Slack request):
python example.py -t "Test message" --mockMirginCipher
MIT
---~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.