← 返回 Skills 市场
allanwei

Slack Standup

作者 awei · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
350
总下载
0
收藏
1
当前安装
3
版本数
在 OpenClaw 中安装
/install slack-standup
功能描述
Automates Slack daily standups by prompting updates, compiling responses, and posting summaries on a set schedule.
安全使用建议
Do not install or run these scripts in a production workspace yet. Ask the publisher for source provenance and a homepage; confirm whether the token in scripts is a placeholder. Inspect and remove any hardcoded tokens, then supply credentials via environment variables (SLACK_BOT_TOKEN, SLACK_CHANNEL_ID) with least privilege scopes (only chat:write as needed). Run first in a sandbox/test Slack workspace. If the included token was real and exposed, rotate the token immediately. If you cannot verify the author or they refuse to remove hardcoded secrets, treat the package as untrusted.
功能分析
Type: OpenClaw Skill Name: slack-standup Version: 1.0.2 The skill bundle provides standard functionality for an automated Slack standup bot, using shell scripts to interact with the Slack API via curl. The scripts (scripts/slack-standup.sh and scripts/standup.sh) align with the stated purpose in SKILL.md and README.md, and no evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
能力评估
Purpose & Capability
Name, README, SKILL.md and scripts all describe a Slack standup bot and the code performs Slack API calls, so purpose and capability align — but registry metadata declares no required env vars while the scripts require SLACK_BOT_TOKEN / SLACK_CHANNEL_ID (and one script hardcodes a token and channel). That mismatch is unexpected and concerning.
Instruction Scope
SKILL.md instructs the user to configure a Slack bot token and schedule reminders, which is fine. However the bundled scripts include behavior beyond the SKILL.md's declared artifacts: scripts post messages in a loop to specific users, aggregate responses, and one script contains a literal SLACK_TOKEN value. The instructions do not explain or justify the hardcoded token or the static user list.
Install Mechanism
No install spec (instruction-only plus shell scripts). This is lower risk because nothing is automatically downloaded or installed, but the presence of executable scripts means the agent or user could run code locally — review before execution.
Credentials
Registry metadata lists no required env vars, yet scripts expect SLACK_BOT_TOKEN and SLACK_CHANNEL_ID. More importantly, scripts/slack-standup.sh contains SLACK_TOKEN="xoxb-12345678901-1234567890" and CHANNEL="#standup" — a hardcoded token-like string in source is disproportionate and may indicate an accidental secret commit or careless packaging.
Persistence & Privilege
The skill is not marked always:true and doesn't request system-wide persistent privileges. It doesn't modify other skills or agent config in the provided files.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install slack-standup
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /slack-standup 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
- Added new startup script: scripts/slack-standup.sh - Updated SKILL.md version and metadata formatting - Minor adjustments to scripts/standup.sh for improved maintainability
v1.0.1
- Updated the version number in SKILL.md from 1.0.0 to 1. - No changes to features, usage, or core descriptions.
v1.0.0
slack-standup 1.0.0 initial release - Automated daily standup bot for Slack. - Collects team updates at scheduled times, aggregates responses, and posts summaries. - Supports recurring reminders and formatted summary posting. - Reduces time spent on synchronous standup meetings for remote teams. - Easy installation and simple configuration via Slack bot token.
元数据
Slug slack-standup
版本 1.0.2
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 3
常见问题

Slack Standup 是什么?

Automates Slack daily standups by prompting updates, compiling responses, and posting summaries on a set schedule. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 350 次。

如何安装 Slack Standup?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install slack-standup」即可一键安装,无需额外配置。

Slack Standup 是免费的吗?

是的,Slack Standup 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Slack Standup 支持哪些平台?

Slack Standup 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Slack Standup?

由 awei(@allanwei)开发并维护,当前版本 v1.0.2。

💬 留言讨论