← Back to Skills Marketplace
261
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install slack-openapi-skill
Description
Operate Slack Web API through UXC with a curated OpenAPI schema, bearer-token auth, and messaging-core guardrails.
Usage Guidance
This skill is basically a curated OpenAPI binding for Slack that relies on the uxc CLI and Slack bearer tokens. Before installing: (1) confirm you trust the repository/source (homepage unknown); (2) ensure uxc is actually installed and that you are comfortable giving the skill access to Slack tokens — prefer a bot token (xoxb-...) with least privileges instead of a user token; (3) be aware the SKILL.md expects network access to slack.com and to raw.githubusercontent.com for the schema; (4) note the package metadata does not declare the runtime dependencies (uxc) or the secret env vars — treat that as a metadata omission and verify any CI/validation scripts (scripts/validate.sh) and the referenced schema locally first; (5) if you will enable autonomous invocation, consider limiting the token scope and monitoring activity, and only grant xoxp (user) tokens when absolutely necessary.
Capability Analysis
Type: OpenClaw Skill
Name: slack-openapi-skill
Version: 1.0.0
The skill bundle provides a legitimate interface for interacting with the Slack Web API via the uxc tool. It includes a curated OpenAPI schema (slack-web.openapi.json), clear documentation for authentication using Slack bot and user tokens, and a validation script (validate.sh) to ensure configuration integrity. The instructions in SKILL.md and usage-patterns.md focus on standard messaging operations and include explicit guardrails, such as requiring user confirmation for write operations, with no evidence of malicious intent, data exfiltration, or prompt injection.
Capability Assessment
Purpose & Capability
The skill's name/description and SKILL.md align with operating the Slack Web API via the uxc CLI and Slack bearer tokens (xoxb/xoxp/xapp). However, the registry metadata declares no required binaries or env vars while the SKILL.md explicitly requires the uxc binary in PATH and recommends/mentions secret env vars (SLACK_BOT_TOKEN, SLACK_USER_TOKEN, SLACK_APP_TOKEN). That mismatch between declared requirements and runtime instructions is an incoherence to verify.
Instruction Scope
The SKILL.md stays within the Slack/uxc scope: linking a fixed OpenAPI schema URL, performing read/write Slack Web API calls, and optionally using Socket Mode. It does not instruct reading arbitrary host files or exfiltrating unrelated secrets. Network access to slack.com and GitHub raw content is required and explicitly stated.
Install Mechanism
This is instruction-only: there is no install spec. The schema URL is hosted on raw.githubusercontent.com (a well-known release host). No downloads from unknown/personal servers or extract operations are present.
Credentials
The SKILL.md legitimately asks users to provide Slack tokens via environment variables (SLACK_BOT_TOKEN, SLACK_USER_TOKEN, SLACK_APP_TOKEN) and to set up uxc auth bindings. Those variables are proportionate to the skill's purpose. The inconsistency is that the skill metadata did not list required env vars or binaries; the presence of a validate.sh that expects rg and jq is another undeclared runtime/test dependency.
Persistence & Privilege
always:false and no required config paths are declared. The skill does not request permanent elevated privileges or modify other skills' config. It can be invoked autonomously by the agent (default), which is expected for skills; this is not combined with other red flags.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install slack-openapi-skill - After installation, invoke the skill by name or use
/slack-openapi-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of slack-openapi-skill.
- Enables execution of Slack Web API operations via UXC with OpenAPI schema guidance.
- Supports auth validation, channel lookup/inspection, conversation and thread reads, posting messages, and adding reactions.
- Integrates with `uxc`'s Slack Socket Mode transport for basic live event ingest.
- Provides clear authentication paths for bot, user, and app-level tokens.
- Excludes Slack OAuth flows, file uploads, and admin/usergroup endpoints.
Metadata
Frequently Asked Questions
What is Slack OpenAPI Skill?
Operate Slack Web API through UXC with a curated OpenAPI schema, bearer-token auth, and messaging-core guardrails. It is an AI Agent Skill for Claude Code / OpenClaw, with 261 downloads so far.
How do I install Slack OpenAPI Skill?
Run "/install slack-openapi-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Slack OpenAPI Skill free?
Yes, Slack OpenAPI Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Slack OpenAPI Skill support?
Slack OpenAPI Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Slack OpenAPI Skill?
It is built and maintained by jolestar (@jolestar); the current version is v1.0.0.
More Skills