Slack Actions Skill

Overview

The Slack Actions Skill enables Clawdbot to securely interact with Slack channels and direct messages using a Bot OAuth token.

This skill allows agents to:

• Send, edit, and delete messages
• Add and list reactions
• Pin and unpin messages
• Read recent channel history
• Retrieve member information
• List workspace emojis

Purpose & Capability

This skill enables authenticated Slack operations using a Bot OAuth token supplied through the SLACK_BOT_TOKEN environment variable.

With valid credentials, the skill can:

• Manage messages and reactions
• Maintain pinned references
• Retrieve basic user metadata
• Support lightweight workflow automation

Authentication & Configuration

Required Environment Variable

This skill requires a Slack Bot User OAuth token.

Before use, configure:

SLACK_BOT_TOKEN

export SLACK_BOT_TOKEN="xoxb-xxxxxxxxxxxx-xxxxxxxxxxxx-xxxxxxxxxxxx"

Or in .env format:

SLACK_BOT_TOKEN=xoxb-xxxxxxxxxxxx-xxxxxxxxxxxx-xxxxxxxxxxxx

Token Requirements

The token must include the following OAuth scopes:

• chat:write
• channels:read
• channels:history
• reactions:write
• pins:write
• users:read
• emoji:read

Credential Storage

• Tokens must be stored only in environment variables
• Tokens must never be hardcoded
• Tokens must never be logged
• Tokens must not be exposed in outputs

Initial Setup

To configure this skill:

• Create a Slack App in your workspace
• Enable Bot Token authentication
• Assign required OAuth scopes
• Install the app to the workspace
• Copy the Bot User OAuth token
• Store the token in SLACK_BOT_TOKEN
• Restart the agent

Credential Constraints

• Only Bot User tokens (xoxb-) are supported
• User tokens (xoxp-) are not permitted
• Tokens must belong to a single workspace
• Cross-workspace tokens are unsupported
• Tokens must be rotated periodically
• Tokens must comply with organizational security policies

When to Use This Skill

Activate this skill when the user requests:

• Sending messages to Slack
• Reacting to messages
• Editing or deleting content
• Pinning or unpinning messages
• Reading recent messages
• Looking up users
• Viewing emojis

“Send this to #engineering.”

“React with a checkmark.”

“Pin that message.”

“Who is U123?”

Required Inputs

Message Targeting

• channelId — Slack channel ID (ex: C1234567890)
• messageId — Slack timestamp (ex: 1712023032.1234)

Reactions

• emoji — Unicode emoji or :name: format

Sending Messages

• to — channel: or user:
• content — Message text

Supported Action Groups

Available Actions

React to a Message

{
  "action": "react",
  "channelId": "C123",
  "messageId": "1712023032.1234",
  "emoji": "✅"
}

List Reactions

{
  "action": "reactions",
  "channelId": "C123",
  "messageId": "1712023032.1234"
}

Send a Message

{
  "action": "sendMessage",
  "to": "channel:C123",
  "content": "Hello from Clawdbot"
}

Edit a Message

{
  "action": "editMessage",
  "channelId": "C123",
  "messageId": "1712023032.1234",
  "content": "Updated text"
}

Delete a Message

{
  "action": "deleteMessage",
  "channelId": "C123",
  "messageId": "1712023032.1234"
}

Read Recent Messages

{
  "action": "readMessages",
  "channelId": "C123",
  "limit": 20
}

Pin a Message

{
  "action": "pinMessage",
  "channelId": "C123",
  "messageId": "1712023032.1234"
}

Unpin a Message

{
  "action": "unpinMessage",
  "channelId": "C123",
  "messageId": "1712023032.1234"
}

List Pinned Items

{
  "action": "listPins",
  "channelId": "C123"
}

Get Member Information

{
  "action": "memberInfo",
  "userId": "U123"
}

List Workspace Emojis

{
  "action": "emojiList"
}

Behavioral Rules

• Confirm IDs before destructive actions
• Never delete messages without explicit user approval
• Prefer reactions over messages for acknowledgments
• Validate inputs before execution
• Never expose credentials

Usage Examples

Mark Task Complete

{
  "action": "react",
  "channelId": "C123",
  "messageId": "1712023032.1234",
  "emoji": "✅"
}

Post Status Update

{
  "action": "sendMessage",
  "to": "channel:C456",
  "content": "Deployment completed successfully."
}

Save Important Message

{
  "action": "pinMessage",
  "channelId": "C123",
  "messageId": "1712023032.1234"
}

Instruction Scope

This skill is limited to Slack workspace operations authorized by the configured bot token.

It does NOT:

• Create Slack applications
• Modify workspace settings
• Manage billing
• Bypass permissions
• Escalate privileges

Compliance

This skill follows Slack API Terms of Service and OAuth security guidelines.

Users are responsible for obtaining organizational approval prior to deployment.

Best Practices

• Use reactions for lightweight workflows
• Pin long-term references
• Keep messages concise
• Avoid bulk destructive actions
• Rotate credentials regularly