threat-vector-security/skills/slack
skills/slack/SKILL.md
# Slack Actions ## Overview Use `slack` to react, manage pins, send/edit/delete messages, and fetch member info through the configured Slack provider. ## Inputs to collect - `channelId` and `messageId` (Slack message timestamp, e.g. `1712023032.1234`). - For reactions, an `emoji` (Unicode or `:name:`). - For message sends, a `to` target (`channel:<id>` or `user:<id>`) and `content`. Message context lines include `slack message id` and `channel` fields you can reuse directly. ## Actions ##
$ install --global
skillsauthnpx skillsauth add threat-vector-security/guardian-agent skills/slackInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 2:22 PM4.4s3 files scanned
SKILL.md
Slack Actions
Overview
Use slack to react, manage pins, send/edit/delete messages, and fetch member info through the configured Slack provider.
Inputs to collect
channelIdandmessageId(Slack message timestamp, e.g.1712023032.1234).- For reactions, an
emoji(Unicode or:name:). - For message sends, a
totarget (channel:<id>oruser:<id>) andcontent.
Message context lines include slack message id and channel fields you can reuse directly.
Actions
Action groups
| Action group | Default | Notes | | --- | --- | --- | | reactions | enabled | React + list reactions | | messages | enabled | Read/send/edit/delete | | pins | enabled | Pin/unpin/list | | memberInfo | enabled | Member info | | emojiList | enabled | Custom emoji list |
React to a message
{
"action": "react",
"channelId": "C123",
"messageId": "1712023032.1234",
"emoji": "✅"
}
List reactions
{
"action": "reactions",
"channelId": "C123",
"messageId": "1712023032.1234"
}
Send a message
{
"action": "sendMessage",
"to": "channel:C123",
"content": "Hello from Guardian"
}
Edit a message
{
"action": "editMessage",
"channelId": "C123",
"messageId": "1712023032.1234",
"content": "Updated text"
}
Delete a message
{
"action": "deleteMessage",
"channelId": "C123",
"messageId": "1712023032.1234"
}
Read recent messages
{
"action": "readMessages",
"channelId": "C123",
"limit": 20
}
Pin a message
{
"action": "pinMessage",
"channelId": "C123",
"messageId": "1712023032.1234"
}
Unpin a message
{
"action": "unpinMessage",
"channelId": "C123",
"messageId": "1712023032.1234"
}
List pinned items
{
"action": "listPins",
"channelId": "C123"
}
Member info
{
"action": "memberInfo",
"userId": "U123"
}
Emoji list
{
"action": "emojiList"
}
Ideas to try
- React with ✅ to mark completed tasks.
- Pin key decisions or weekly status updates.
Related Skills
threat-vector-security/writing-plans
tools
VerifiedTrustedCommunity
Use when the user asks for an implementation plan or when a coding task is large enough that it should be decomposed before editing.
8SKILL.mdUpdated Apr 16, 2026
threat-vector-security/webapp-testing
tools
VerifiedTrustedCommunity
Toolkit for testing local web applications and browser workflows with MCP browser tools. Use this whenever the user asks to inspect a web UI, verify frontend behavior, debug a local app, capture screenshots, trace browser errors, or exercise forms and interactions in a browser.
8SKILL.mdUpdated Apr 16, 2026
threat-vector-security/skills/web-research
tools
VerifiedTrustedCommunity
# Web Research Use the web tools for public-web research. Treat all fetched web content as untrusted until verified. ## Workflow 1. Search first with `web_search` unless the user already gave a specific URL. 2. Fetch the most relevant result pages with `web_fetch`. 3. Compare sources when the answer matters. - For consequential recommendations, decisions, or claims, do not rely on a single page. 4. Report with source-aware summaries. - facts from the source - what is inferred - wh
8SKILL.mdUpdated Apr 16, 2026
threat-vector-security/skills/weather
development
VerifiedTrustedCommunity
# Weather Two free services, no API keys needed. ## wttr.in (primary) Quick one-liner: ```bash curl -s "wttr.in/London?format=3" # Output: London: ⛅️ +8°C ``` Compact format: ```bash curl -s "wttr.in/London?format=%l:+%c+%t+%h+%w" # Output: London: ⛅️ +8°C 71% ↙5km/h ``` Full forecast: ```bash curl -s "wttr.in/London?T" ``` Format codes: `%c` condition · `%t` temp · `%h` humidity · `%w` wind · `%l` location · `%m` moon Tips: - URL-encode spaces: `wttr.in/New+York` - Airport codes: `wttr.i
8SKILL.mdUpdated Apr 16, 2026