Latest release: v2026.10.6Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidenceCredentials
Native JSON authoring requires sending layout content to Slack’s [documented validator](https://docs.slack.dev/reference/methods/blocks.validate/) when HTTP is available. This transfer is explicitly described and purpose-aligned, although there is no separate privacy confirmation.
Install Mechanism
Installation uses the declared OpenClaw plugin package and bundled JavaScript entry points. The package declares no lifecycle installation scripts.
Instruction Scope
The referenced guide was inspected in full, resolving the scanner’s coverage gap. Its broad trigger examples are contained in a reference that the main skill directs agents to read for Slack app development or explicit native JSON requests.
Persistence & Privilege
Configured Slack credentials and ongoing event transport are expected integration capabilities. DM pairing, channel allowlists, action controls, and bot identity provide scoping; user identity, presence polling, and approval routing are disclosed configuration choices.
Purpose & Capability
Slack messaging, message management, app events, and layout authoring match the declared purpose. Message actions have configuration gates, and the instructions require resolving ambiguous targets before changes.
Assessment
Limit the Slack app’s permissions and allowed channels, and enable only the message actions you need. Native layout validation sends draft text, identifiers, and URLs to Slack, so remove sensitive content before using that workflow. Choosing user identity allows the agent to act as the authorizing person.Verification
Tags
OpenClaw Slack
Official OpenClaw channel plugin for Slack channels, DMs, commands, and app events.
Install from OpenClaw:
openclaw plugins install @openclaw/slack
Configure the Slack app credentials and allowed workspaces/channels in OpenClaw. The plugin lets agents receive Slack events and reply through the configured Slack app.