Skip to content
Back to skills

Slack Bot Builder

ASecurity

Build Slack apps using the Bolt framework across Python,

  • 8 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 7, 2026
developmentjavascriptpythonrustjavatestingapi

Works with

  • api

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned November 7, 2026

npx -y skills add huytran1120/vietnam-agentic-skills --skill slack-bot-builder --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Slack Bot Builder?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Slack Bot Builder
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/huytran1120-slack-bot-builder/badge)](https://www.skillsdirectory.com/skills/huytran1120-slack-bot-builder)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: slack-bot-builder
description: Build Slack apps using the Bolt framework across Python,
  JavaScript, and Java. Covers Block Kit for rich UIs, interactive components,
  slash commands, event handling, OAuth installation flows, and Workflow Builder
  integration.
risk: critical
source: vibeship-spawner-skills (Apache 2.0)
date_added: 2026-02-27
---

# Slack Bot Builder

Build Slack apps using the Bolt framework across Python, JavaScript, and Java.
Covers Block Kit for rich UIs, interactive components, slash commands,
event handling, OAuth installation flows, and Workflow Builder integration.
Focus on best practices for production-ready Slack apps.

## Application boundary

The bundled guide is a set of partial Python sketches, not a runnable app across all three advertised languages. Supply missing business functions/stores/imports and verify the pinned Bolt SDK APIs. Authenticate and authorize the acting workspace/user/object before approvals, ticket creation or incident changes; removing a button does not prevent duplicate/concurrent processing. Use durable idempotency and tenant-scoped installation storage. Escape untrusted mrkdwn/mentions and redact tokens, response URLs and private channel data. Sending real messages and enabling OAuth/production integrations require explicit authorization. Socket Mode can support production and multiple connections; choose transport from verified platform/distribution requirements, not the guide's development-only claim. Legacy WorkflowStep examples are historical and need migration to supported custom steps.

## Detailed Guide

Read [the detailed guide](references/detailed-guide.md) before executing this skill. It retains the complete procedure and reference material. Treat its safety, prerequisites, and validation requirements as mandatory. For focused work, load the relevant sections; for end-to-end work, read the guide completely.

## When to Use
- User mentions or implies: slack bot
- User mentions or implies: slack app
- User mentions or implies: bolt framework
- User mentions or implies: block kit
- User mentions or implies: slash command
- User mentions or implies: slack webhook
- User mentions or implies: slack workflow
- User mentions or implies: slack interactive
- User mentions or implies: slack oauth

## Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

Files in this skill

  • SKILL.md2.6 KB
  • references/detailed-guide.md40.1 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.