← 返回 Skills 市场
261
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install slack-openapi-skill
功能描述
Operate Slack Web API through UXC with a curated OpenAPI schema, bearer-token auth, and messaging-core guardrails.
安全使用建议
This skill is basically a curated OpenAPI binding for Slack that relies on the uxc CLI and Slack bearer tokens. Before installing: (1) confirm you trust the repository/source (homepage unknown); (2) ensure uxc is actually installed and that you are comfortable giving the skill access to Slack tokens — prefer a bot token (xoxb-...) with least privileges instead of a user token; (3) be aware the SKILL.md expects network access to slack.com and to raw.githubusercontent.com for the schema; (4) note the package metadata does not declare the runtime dependencies (uxc) or the secret env vars — treat that as a metadata omission and verify any CI/validation scripts (scripts/validate.sh) and the referenced schema locally first; (5) if you will enable autonomous invocation, consider limiting the token scope and monitoring activity, and only grant xoxp (user) tokens when absolutely necessary.
功能分析
Type: OpenClaw Skill
Name: slack-openapi-skill
Version: 1.0.0
The skill bundle provides a legitimate interface for interacting with the Slack Web API via the uxc tool. It includes a curated OpenAPI schema (slack-web.openapi.json), clear documentation for authentication using Slack bot and user tokens, and a validation script (validate.sh) to ensure configuration integrity. The instructions in SKILL.md and usage-patterns.md focus on standard messaging operations and include explicit guardrails, such as requiring user confirmation for write operations, with no evidence of malicious intent, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
The skill's name/description and SKILL.md align with operating the Slack Web API via the uxc CLI and Slack bearer tokens (xoxb/xoxp/xapp). However, the registry metadata declares no required binaries or env vars while the SKILL.md explicitly requires the uxc binary in PATH and recommends/mentions secret env vars (SLACK_BOT_TOKEN, SLACK_USER_TOKEN, SLACK_APP_TOKEN). That mismatch between declared requirements and runtime instructions is an incoherence to verify.
Instruction Scope
The SKILL.md stays within the Slack/uxc scope: linking a fixed OpenAPI schema URL, performing read/write Slack Web API calls, and optionally using Socket Mode. It does not instruct reading arbitrary host files or exfiltrating unrelated secrets. Network access to slack.com and GitHub raw content is required and explicitly stated.
Install Mechanism
This is instruction-only: there is no install spec. The schema URL is hosted on raw.githubusercontent.com (a well-known release host). No downloads from unknown/personal servers or extract operations are present.
Credentials
The SKILL.md legitimately asks users to provide Slack tokens via environment variables (SLACK_BOT_TOKEN, SLACK_USER_TOKEN, SLACK_APP_TOKEN) and to set up uxc auth bindings. Those variables are proportionate to the skill's purpose. The inconsistency is that the skill metadata did not list required env vars or binaries; the presence of a validate.sh that expects rg and jq is another undeclared runtime/test dependency.
Persistence & Privilege
always:false and no required config paths are declared. The skill does not request permanent elevated privileges or modify other skills' config. It can be invoked autonomously by the agent (default), which is expected for skills; this is not combined with other red flags.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install slack-openapi-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/slack-openapi-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of slack-openapi-skill.
- Enables execution of Slack Web API operations via UXC with OpenAPI schema guidance.
- Supports auth validation, channel lookup/inspection, conversation and thread reads, posting messages, and adding reactions.
- Integrates with `uxc`'s Slack Socket Mode transport for basic live event ingest.
- Provides clear authentication paths for bot, user, and app-level tokens.
- Excludes Slack OAuth flows, file uploads, and admin/usergroup endpoints.
元数据
常见问题
Slack OpenAPI Skill 是什么？
Operate Slack Web API through UXC with a curated OpenAPI schema, bearer-token auth, and messaging-core guardrails. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 261 次。
如何安装 Slack OpenAPI Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install slack-openapi-skill」即可一键安装，无需额外配置。
Slack OpenAPI Skill 是免费的吗？
是的，Slack OpenAPI Skill 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Slack OpenAPI Skill 支持哪些平台？
Slack OpenAPI Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Slack OpenAPI Skill？
由 jolestar（@jolestar）开发并维护，当前版本 v1.0.0。
推荐 Skills