Capability drift in karbassi/slack-mcp

github karbassi/slack-mcp C

MCP server exposing 193 Slack Web API methods as tools for AI agents

maintainer: karbassi
tools: 254
CVEs: 0
releases: 5

advisory #604127

HIGH karbassi/slack-mcp 07-30 18:50

code analysis flagged committed secret in karbassi/slack-mcp

current permission surface (inferred):

drift timeline for karbassi/slack-mcp → security tab →

drift history for this server 7 recorded

HIGH 07-30 18:50 code analysis flagged committed secret in karbassi/slack-mcp you are here
HIGH 07-10 20:28 code analysis flagged committed secret in karbassi/slack-mcp
HIGH 07-06 22:18 code analysis flagged committed secret in karbassi/slack-mcp
HIGH 07-03 09:14 code analysis flagged committed secret in karbassi/slack-mcp
HIGH 06-29 07:47 code analysis flagged committed secret in karbassi/slack-mcp
HIGH 06-26 05:24 code analysis flagged committed secret in karbassi/slack-mcp
HIGH 06-24 04:41 code analysis flagged committed secret in karbassi/slack-mcp

Each entry is one capability capture differing from the one before it — a review signal, not a verdict.