test-slack-app

test-slack-app is a skill for Claude Code from slackapi/slack-skills-plugin. It costs 107 tokens per session (2,106 once invoked), scanned A, original, MIT.

A guide for checking that a Slack app works by running it in a separate developer workspace and trying its real commands, events, buttons, or forms. It supports apps built with the Slack CLI or Bolt.

In plain words
What is it for?
Use it to smoke-test a Slack app, confirm that its interactions respond correctly, and investigate what happens when users invoke its features.
Why use it?
It provides a safe way to verify app behavior without affecting coworkers or a production workspace. The checking is hands-on rather than a fully automated test suite.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the slack plugin — 8 skills, 5 commands, 1 MCP server shipped together

About the project

slack-skills-plugin is a plugin that connects coding agents to Slack through a Slack MCP server and provides Slack-focused skills for users and developers. It is used with Claude Code, Cursor, Codex, and other coding agents to work with Slack and build Slack applications. The catalogue entries are the plugin's included skills, commands, MCP server, instructions, and settings.

slackapi/slack-skills-plugin · 120 stars · on GitHub · docs.slack.dev

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/slackapi/slack-skills-plugin/test-slack-app
Any agent
npx skills add slackapi/slack-skills-plugin --skill test-slack-app
Clone the repo
git clone --depth 1 https://github.com/slackapi/slack-skills-plugin

Made for: Claude Code.

Or install slack, the plugin that ships this one along with the rest of its 8 skills, 5 commands, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for test-slack-app

README.md
[![agentmods](https://agentmods.dev/badge/skills/slackapi/slack-skills-plugin/test-slack-app.svg)](https://agentmods.dev/skills/slackapi/slack-skills-plugin/test-slack-app)
Your own site
<a href="https://agentmods.dev/skills/slackapi/slack-skills-plugin/test-slack-app"><img src="https://agentmods.dev/badge/skills/slackapi/slack-skills-plugin/test-slack-app.svg" alt="Measured on agentmods" height="20"></a>
Per session 107 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,106 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00107 $0.02106
Opus 5 $0.00053 $0.01053
Sonnet 5 $0.00021 $0.00421
Haiku 4.5 $0.00011 $0.00211

Measured 6d ago against content hash 7b10aac8c954, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-05, from the pricing page.

Security

Grade A, and why

test-slack-app scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/test-slack-app/SKILL.md · 111 lines

How it starts

The opening of the file, as written. The whole thing — 111 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Test Slack App

Help a developer confirm that a Slack app they already built actually works. This is the last step of the build loop, after the slack:create-slack-app skill scaffolds an app and the slack:slack-cli skill runs it.

The approach is simple and safe:

  1. Run the app in a developer sandbox: a free, throwaway Slack org for building and testing, never a workspace with real coworkers in it.
  2. Read the app's source to learn what it actually listens for.
  3. Hand the developer concrete steps to perform in Slack, then help them confirm the app responds.

This is guided manual checking, not an automated test suite: you drive the setup and tell the developer what to type or click, and they confirm what they see. It works best for apps managed by the Slack CLI; there is a best-effort path for plain Bolt apps in Step 2.


Step 1: Set Up a Safe Place to Test

1a. Detect the Slack CLI

Use the slack:slack-cli skill (Step 1: Detect the Slack CLI) to check whether the public Slack CLI is installed and resolve its command name. The fingerprint check, alias fallback, and install instructions all live there; do not duplicate them here. Refer to the resolved command as SLACK_CMD throughout. If the CLI is not installed, guide the developer through that same step to install it, since running the app needs it.

1b. Make sure there is a developer sandbox to test in

Testing belongs in a developer sandbox, never a workspace with real coworkers in it.

  • Explain it from the live docs, not from here. Use the slack:slack-docs skill to fetch and summarize https://docs.slack.dev/tools/developer-sandboxes.md, so the recommendation always reflects the current docs rather than a copy that drifts out of date. Tell the developer that Slack recommends a sandbox for building and testing apps.
  • Find the current target. Run SLACK_CMD auth list for the authenticated workspaces and their team IDs, and, from the project directory, SLACK_CMD app list for the apps already installed and their IDs.
  • Confirm it is a sandbox. The CLI cannot tell a sandbox apart from a workspace with real users, so ask the developer to confirm the target is a developer sandbox. If there is no sandbox yet, set one up with the slack:create-slack-app skill (Step 3: Set Up a Developer Sandbox), which owns the sandbox list / sandbox create flow and the Developer Program links. Creating a sandbox happens in the browser, so have the developer come back here once the sandbox exists and they have logged into it.

Read the full file on GitHub · 111 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 111 lines · 107 tokens per session scan A 7b10aac8c954

Subscribe to this mod's changes

test-slack-app is a skill published in the GitHub repository slackapi/slack-skills-plugin (120 stars, last pushed today), licensed MIT. It adds 107 tokens to every session and 2,106 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

browser-testing-with-devtools

Tests in real browsers via Chrome DevTools MCP. Use when building or debugging anything that runs in a browser. Use when you need to inspect the DOM, capture console errors, analyze network requests, profile performance, or verify visual output with real runtime data. Requires the chrome-devtools MCP server to be…

addyosmani/agent-skills · 68 tokens

skillshare-cli-e2e-test

Run isolated E2E tests in devcontainer from aidocs/tests runbooks. Use this skill whenever the user asks to: run an E2E test, execute a test runbook, validate a feature end-to-end, create a new runbook, or test CLI behavior in isolation. If you need to run a multi-step CLI validation sequence (init → install → sync →…

runkids/skillshare · 127 tokens

awesome-test-writing

Designs and writes tests that catch real regressions — placement (unit/integration/E2E), factories and fixtures, behavior-first assertions, characterization tests for legacy code, property/fuzz tests for parsers. Use when asked to 'write tests', 'add test coverage', 'test this module', 'напиши тесты', when a bug fix…

khasky/awesome-agent-skills · 134 tokens

nestjs-testing-expert

NestJS testing mechanics with Jest — building testing modules, mocking providers and repositories, writing service and controller specs, and driving HTTP end-to-end tests through the real application. Use for any test touching a NestJS service, controller, guard, module, or API endpoint, including test-module setup…

shipshitdev/skills · 77 tokens

agent-browser

Automates browser interactions for web testing, form filling, screenshots, and data extraction. Use when the user needs to navigate websites, interact with web pages, fill forms, take screenshots, test web applications, or extract information from web pages.

shipshitdev/skills · 51 tokens

browser-testing-with-devtools

在真实浏览器中测试。构建或调试任何在浏览器中运行的内容时使用。当你需要通过 Chrome DevTools MCP 检查 DOM、捕获 console 错误、分析网络请求、分析性能,或用真实运行时数据验证视觉输出时使用。.

vinvcn/addyosmani-agent-skills-zh · 67 tokens