Borrowing it
Nothing to install: this file belongs to lazallen/slack-mcp-server. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/lazallen/slack-mcp-server/master/.claude/commands/slack-mcp-install.mdgit clone --depth 1 https://github.com/lazallen/slack-mcp-serverWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/lazallen/slack-mcp-server/slack-mcp-install)<a href="https://agentmods.dev/commands/lazallen/slack-mcp-server/slack-mcp-install"><img src="https://agentmods.dev/badge/commands/lazallen/slack-mcp-server/slack-mcp-install/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/lazallen/slack-mcp-server/slack-mcp-install"><img src="https://agentmods.dev/badge/commands/lazallen/slack-mcp-server/slack-mcp-install.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.00645 |
| Opus 5.5 | $0.00007 | $0.00258 |
| Sonnet 5.5 | $0.00003 | $0.00129 |
| Haiku 4.5 | $0.00002 | $0.00064 |
Grade A, and why
slack-mcp-install scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 67 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Run a full install and config check for the Slack MCP server. Work through these steps in order:
1. Build & Install
Run make install from /Users/lazallen/Projects/cerebro/slack-mcp-server/. Report the output. If it fails, show the error and stop.
2. Verify Binary
Check the installed binary:
- Exists at
~/bin/slack-mcp-server - Is executable (
ls -la ~/bin/slack-mcp-server) - Runs without error (
~/bin/slack-mcp-server --transport stdiokilled immediately after launch, or just check it responds to help flags)
3. Check Wrapper Script
Verify /Users/lazallen/bin/slack-mcp-wrapper.sh:
- Exists and is executable
- Reads
Slack MCP xoxcandSlack MCP xoxdfrom macOS Keychain - Ends with
exec "$@"
4. Check Keychain Tokens
Run these commands and report whether each returns a non-empty value (do NOT print the token values):
security find-generic-password -a "$USER" -s "Slack MCP xoxc" -w 2>/dev/null | wc -c
security find-generic-password -a "$USER" -s "Slack MCP xoxd" -w 2>/dev/null | wc -c
- If either returns 0: warn the user tokens are missing and show the refresh command from CLAUDE.md
- If both are set: report tokens present
5. Check ~/.claude.json Config
Read ~/.claude.json and verify the slack-mcp entry matches this structure:
{
"type": "stdio",
"command": "/Users/lazallen/bin/slack-mcp-wrapper.sh",
"args": ["/Users/lazallen/bin/slack-mcp-server", "--transport", "stdio"],
"env": {
"SLACK_MCP_ADD_MESSAGE_TOOL": "true",
"SLACK_MCP_SAVED_LIST_TOOL": "true",
"SLACK_MCP_SAVED_COMPLETE_TOOL": "true"
}
}
Report any differences. If the binary path in args[0] is different (e.g. still pointing to the project build dir), update it to /Users/lazallen/bin/slack-mcp-server using python3 to parse and rewrite the JSON safely.
6. Summary
Print a clear status table:
| Check | Status |
|---|---|
| Binary built & installed | ✓/✗ |
| Wrapper script | ✓/✗ |
| Keychain token xoxc | ✓/✗ |
| Keychain token xoxd | ✓/✗ |
| ~/.claude.json config | ✓/✗ |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 67 lines · 17 tokens per session scan A 1bdfb88c4301
slack-mcp-install is a command published in the GitHub repository lazallen/slack-mcp-server (2 stars, last pushed 6mo ago), licensed MIT. It adds 17 tokens to every session and 645 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
slack-mcp-install compared with commands from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| slack-mcp-installlazallen/slack-mcp-server | Command | 2 | 6mo ago | MIT | A | 17 | Claude Code |
| checklistgithub/spec-kit | Command | 148k | yesterday | MIT | A | 13 | Claude Code |
| clarifygithub/spec-kit | Command | 148k | yesterday | MIT | A | 27 | Claude Code |
| specifygithub/spec-kit | Command | 148k | yesterday | MIT | A | 13 | Claude Code |
| analyzegithub/spec-kit | Command | 148k | yesterday | MIT | A | 26 | Claude Code |
| convergegithub/spec-kit | Command | 148k | yesterday | MIT | A | 35 | Claude Code |
| implementgithub/spec-kit | Command | 148k | yesterday | MIT | A | 14 | Claude Code |