Security audit

Slack

Security checks across malware telemetry and agentic risk

Overview

This skill is a Slack integration through Maton; it has real Slack read/write capability, but the behavior is mostly disclosed and purpose-aligned.

Install only if you are comfortable routing Slack API actions through Maton and using a Maton API key. Review the Slack scopes on the connected account, keep write actions user-approved, and clarify where the Maton API key and OAuth connection are stored before using it in a sensitive workspace.

SkillSpector

By NVIDIA

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Intent-Code Divergence

Medium

Confidence: 98% confidence
Finding: The skill documentation says no extra API key is needed, but the examples and operational steps clearly require MATON_API_KEY. This mismatch can mislead users into mishandling authentication, misunderstanding trust boundaries, or attempting to use the skill without realizing credentials are being sent to a third-party proxy.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.