Latest release: v2026.9.2Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidenceCredentials
The plugin reads configured Slack environment credentials and connects to Slack Socket Mode, HTTP Events, or an explicitly configured relay; it includes allowlist-oriented defaults such as DM pairing and group allowlist, plus limits for file/media handling.
Install Mechanism
The package metadata identifies @openclaw/slack, has no package install scripts, declares OpenClaw plugin entries, marks setup credentials as sensitive, and sets plugin activation on startup to false.
Instruction Scope
The Slack skill tells the agent to use the message tool and includes guardrails for ambiguous edits, deletes, pins, reactions, account selection, and threads; the Block Kit skill is broad and proactive for rich Slack replies, but it is disclosed and tied to Slack reply formatting rather than hidden behavior.
Persistence & Privilege
Long-running Slack monitoring, durable ingress queues, optional presence polling, and native approval routing are expected for a Slack channel connector; users should scope Slack app permissions and disable unneeded message actions such as delete, pin, file, or reaction capabilities.
Purpose & Capability
The package purpose is Slack channels, DMs, commands, app events, and Block Kit replies; Slack tokens, message send/read/edit/delete, pins, reactions, files, and Block Kit validation are consistent with that purpose.
Scan Findings in Context
[SQP-1] expected: The concern about proactive Block Kit use is supported by the top-level Block Kit skill wording, but the behavior is disclosed, limited to Slack rich replies, and does not show hidden posting or unrelated data handling.
[SQP-1] expected: The broad trigger wording in official-block-kit.md exists in a reference file used for native Block Kit authoring; it may over-trigger authoring guidance, but it is not evidence of malicious behavior or covert Slack actions.
Assessment
Install this only for workspaces where you want OpenClaw to receive Slack events and reply through a configured Slack app. Use least-privilege Slack scopes, prefer bot identity over user tokens unless needed, keep DM and channel allowlists tight, and disable message actions you do not want agents to use, especially delete, edit, pin, file upload/download, and reactions.Verification
Tags
OpenClaw Slack
Official OpenClaw channel plugin for Slack channels, DMs, commands, and app events.
Install from OpenClaw:
openclaw plugins install @openclaw/slack
Configure the Slack app credentials and allowed workspaces/channels in OpenClaw. The plugin lets agents receive Slack events and reply through the configured Slack app.