← All scanned servers

Trust Card · Static snapshot

korotovsky__slack-mcp-server U

Ungraded — insufficient static coverage · 0 findings (0 critical) · scope broad · Not ranked: insufficient static coverage.

Scanned 2026-10-19 · engine v0.1.3 (8 regex rules, OWASP-mapped) · upstream korotovsky/slack-mcp-server @ b88c0de (2026-05-15)

Score breakdown

No numeric score or breakdown: insufficient static coverage. Findings remain actionable; absence of findings is not evidence of safety.

Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety.

Coverage: limited

Static-heuristic scope: 19 analyzed / 80 discovered files; 48 unsupported source files; 62 excluded; 0 read errors; 0 truncations. This is not a semantic coverage percentage or proof of safety.

File coverage, applied rules and scan limits
{
  "mode": "static-heuristic",
  "status": "limited",
  "reasons": [
    "Unsupported source present"
  ],
  "limitations": [
    "Coverage describes the files read and regex rules applied, not semantic, runtime, or dependency coverage.",
    "Supported code is JavaScript, TypeScript, and Python; JSON/YAML receive only the credential rule.",
    "Skill instructions and other prose are not code-analyzed; declared controls are not verified enforcement.",
    "Ignored directories, declarations, and non-implementation assets are outside rule scope."
  ],
  "discoveredFiles": 80,
  "analyzedFiles": [
    {
      "path": ".github/dependabot.yml",
      "scope": "data",
      "bytes": 501,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": ".github/workflows/integration-tests.yaml",
      "scope": "data",
      "bytes": 718,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": ".github/workflows/release-image.yaml",
      "scope": "data",
      "bytes": 1156,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": ".github/workflows/release.yaml",
      "scope": "data",
      "bytes": 1089,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": ".github/workflows/security-trivy.yaml",
      "scope": "data",
      "bytes": 599,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": ".github/workflows/unit-tests.yaml",
      "scope": "data",
      "bytes": 472,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": ".vscode/launch.json",
      "scope": "data",
      "bytes": 574,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": "docker-compose.dev.yml",
      "scope": "data",
      "bytes": 591,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": "docker-compose.toolkit.yml",
      "scope": "data",
      "bytes": 809,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": "docker-compose.yml",
      "scope": "data",
      "bytes": 504,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": "manifest-dxt.json",
      "scope": "data",
      "bytes": 6563,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": "npm/slack-mcp-server/bin/index.js",
      "scope": "code",
      "bytes": 2450,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-001",
        "AT-SEC-002",
        "AT-SEC-003",
        "AT-SEC-004",
        "AT-SEC-005",
        "AT-SEC-006",
        "AT-SEC-007",
        "AT-COMP-001"
      ]
    },
    {
      "path": "npm/slack-mcp-server/package.json",
      "scope": "data",
      "bytes": 1212,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": "npm/slack-mcp-server-darwin-amd64/package.json",
      "scope": "data",
      "bytes": 363,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": "npm/slack-mcp-server-darwin-arm64/package.json",
      "scope": "data",
      "bytes": 365,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": "npm/slack-mcp-server-linux-amd64/package.json",
      "scope": "data",
      "bytes": 361,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": "npm/slack-mcp-server-linux-arm64/package.json",
      "scope": "data",
      "bytes": 363,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": "npm/slack-mcp-server-windows-amd64/package.json",
      "scope": "data",
      "bytes": 363,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    },
    {
      "path": "npm/slack-mcp-server-windows-arm64/package.json",
      "scope": "data",
      "bytes": 365,
      "nonEmpty": true,
      "ruleIds": [
        "AT-SEC-002"
      ]
    }
  ],
  "unsupportedSourceFiles": [
    ".env.dist",
    "Dockerfile",
    "Makefile",
    "cmd/slack-mcp-server/main.go",
    "go.mod",
    "go.sum",
    "pkg/handler/channels.go",
    "pkg/handler/channels_test.go",
    "pkg/handler/conversations.go",
    "pkg/handler/conversations_test.go",
    "pkg/handler/saved.go",
    "pkg/handler/saved_test.go",
    "pkg/handler/slack_error_test.go",
    "pkg/handler/usergroups.go",
    "pkg/limiter/limits.go",
    "pkg/limiter/retry.go",
    "pkg/limiter/retry_test.go",
    "pkg/provider/api.go",
    "pkg/provider/api_cache_test.go",
    "pkg/provider/api_channels_test.go",
    "pkg/provider/api_edge_fallback_test.go",
    "pkg/provider/api_patch_test.go",
    "pkg/provider/cache_test.go",
    "pkg/provider/edge/client.go",
    "pkg/provider/edge/client_boot.go",
    "pkg/provider/edge/conversations.go",
    "pkg/provider/edge/dms.go",
    "pkg/provider/edge/edge.go",
    "pkg/provider/edge/fasttime/fasttime.go",
    "pkg/provider/edge/fasttime/fasttime_386.go",
    "pkg/provider/edge/fasttime/fasttime_test.go",
    "pkg/provider/edge/fasttime/fasttime_x64.go",
    "pkg/provider/edge/prefs.go",
    "pkg/provider/edge/saved.go",
    "pkg/provider/edge/search.go",
    "pkg/provider/edge/slacker.go",
    "pkg/provider/edge/slacker_test.go",
    "pkg/provider/edge/userlist.go",
    "pkg/provider/edge/users.go",
    "pkg/server/auth/sse_auth.go",
    "pkg/server/server.go",
    "pkg/server/server_test.go",
    "pkg/test/util/mcp.go",
    "pkg/test/util/ngrok.go",
    "pkg/text/text_processor.go",
    "pkg/text/text_processor_test.go",
    "pkg/transport/transport.go",
    "pkg/version/version.go"
  ],
  "excludedFiles": [
    {
      "path": ".git",
      "reason": "ignored-directory"
    },
    {
      "path": ".env.dist",
      "reason": "unsupported-implementation"
    },
    {
      "path": ".gitignore",
      "reason": "outside-rule-scope"
    },
    {
      "path": "Dockerfile",
      "reason": "unsupported-implementation"
    },
    {
      "path": "LICENSE",
      "reason": "outside-rule-scope"
    },
    {
      "path": "Makefile",
      "reason": "unsupported-implementation"
    },
    {
      "path": "README.md",
      "reason": "outside-rule-scope"
    },
    {
      "path": "SECURITY.md",
      "reason": "outside-rule-scope"
    },
    {
      "path": "build/.gitignore",
      "reason": "outside-rule-scope"
    },
    {
      "path": "build/extension.dxt/server/.gitignore",
      "reason": "outside-rule-scope"
    },
    {
      "path": "cmd/slack-mcp-server/main.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "docs/01-authentication-setup.md",
      "reason": "outside-rule-scope"
    },
    {
      "path": "docs/02-installation.md",
      "reason": "outside-rule-scope"
    },
    {
      "path": "docs/03-configuration-and-usage.md",
      "reason": "outside-rule-scope"
    },
    {
      "path": "go.mod",
      "reason": "unsupported-implementation"
    },
    {
      "path": "go.sum",
      "reason": "unsupported-implementation"
    },
    {
      "path": "images/feature-1.gif",
      "reason": "outside-rule-scope"
    },
    {
      "path": "images/feature-2.gif",
      "reason": "outside-rule-scope"
    },
    {
      "path": "images/icon.png",
      "reason": "outside-rule-scope"
    },
    {
      "path": "pkg/handler/channels.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/handler/channels_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/handler/conversations.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/handler/conversations_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/handler/saved.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/handler/saved_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/handler/slack_error_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/handler/usergroups.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/limiter/limits.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/limiter/retry.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/limiter/retry_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/README.md",
      "reason": "outside-rule-scope"
    },
    {
      "path": "pkg/provider/api.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/api_cache_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/api_channels_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/api_edge_fallback_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/api_patch_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/cache_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/client.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/client_boot.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/conversations.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/dms.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/edge.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/fasttime/fasttime.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/fasttime/fasttime_386.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/fasttime/fasttime_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/fasttime/fasttime_x64.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/prefs.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/saved.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/search.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/slacker.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/slacker_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/userlist.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/provider/edge/users.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/server/auth/sse_auth.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/server/server.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/server/server_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/test/util/mcp.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/test/util/ngrok.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/text/text_processor.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/text/text_processor_test.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/transport/transport.go",
      "reason": "unsupported-implementation"
    },
    {
      "path": "pkg/version/version.go",
      "reason": "unsupported-implementation"
    }
  ],
  "readErrors": [],
  "truncation": [],
  "limits": {
    "maxFiles": 4000,
    "maxDepth": 12,
    "maxFileBytes": 1048576
  }
}

Fix first (0 critical/high)

No findings in scope of the 8-rule static suite.

Permissions

Scope: broad · Shell: enabled · Network egress: no · File deletion: none · Human approval: none

Provenance

License: none detected · Lockfile: no · Security policy: yes · Signals: unverified origin

Independently scanned by the OpenTrustBench registry (not self-reported by the project). Static analysis only — no code executed, findings need human triage, counts may include test/example code. Static snapshot; re-scan before relying on it: npx @opentrustbench/cli scan https://github.com/korotovsky/slack-mcp-server. Scores move with every upstream commit; pages refresh weekly. How scoring works.