How does this skill help with Slack security?

It provides specific Go code patterns for verifying Slack's signing secrets and implementing encrypted token storage to prevent unauthorized access.

Does it include rate limiting for Slack APIs?

Yes, it includes a thread-safe Go implementation of a rate limiter to help your application stay within Slack's API tier limits.

What is the difference between Bot and User tokens in this skill?

The skill provides patterns for xoxb- (bot) and xoxp- (user) tokens, helping you choose the right identity and permissions for specific Slack operations.

Does it support multi-workspace installations?

Yes, it includes implementation guides and data structures for managing separate tokens and API clients across multiple Slack teams.

Slack Go Auth & Security

Name: Slack Go Auth & Security
Author: linehaul-ai

bylinehaul-ai

•

协作工具

Implements secure OAuth 2.0 flows, token rotation, and request verification for Go-based Slack applications.

关于

This skill provides domain-specific patterns and guidance for building enterprise-grade Slack integrations using the slack-go-sdk. It covers the complete authentication lifecycle, including generating authorization URLs, managing bot versus user tokens, and implementing multi-workspace storage strategies. By focusing on production security, the skill helps developers implement essential features like request signature verification, token encryption, and automated rotation, ensuring Slack apps remain secure and compliant with best practices.

主要功能

Token rotation and multi-workspace storage patterns
1 GitHub stars
OAuth 2.0 implementation for Bot and User tokens
Granular scope and permission management guides
Programmatic app configuration via Manifest API
Secure request verification using Slack signing secrets

使用场景

Auditing and hardening Slack app permissions and security configurations
Implementing production-ready webhook handlers with request signature verification
Building multi-tenant Slack apps that require secure token storage for different teams

关于

主要功能

Token rotation and multi-workspace storage patterns
1 GitHub stars
OAuth 2.0 implementation for Bot and User tokens
Granular scope and permission management guides
Programmatic app configuration via Manifest API
Secure request verification using Slack signing secrets

使用场景

Auditing and hardening Slack app permissions and security configurations
Implementing production-ready webhook handlers with request signature verification
Building multi-tenant Slack apps that require secure token storage for different teams