Slack Me module

[bpmct]

A discussion dedicated to the Slack Me module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
12 / 17	20 / 20	2 / 2	10 / 10	90 / 100

Drilldown

Track: Utility (notification helper; not an AI agent or IDE)

Presentation & Onboarding — 12 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	Module has 3 variables (2 required, 1 optional). README shows basic usage with agent_id/auth_provider_id and a "Custom Slack Message" example demonstrating the slack_message variable with $COMMAND/$DURATION interpolation. Adequate for a module of this simplicity.
Visual preview	5	0	No image, GIF, or video embedded in the README. The frontmatter icon field is a registry listing icon, not an in-README visual.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs exist in the module. agent_id and auth_provider_id are resource IDs; slack_message is a template string. No inline secrets in README examples.
Non-hardcoded auth path	4	4	Uses Coder external auth: coder external-auth access-token $PROVIDER_ID in slackme.sh. README documents the full setup (Slack app manifest, CODER_EXTERNAL_AUTH_1_* env vars, restart). No raw keys in templates.

Restricted-Environment Readiness — 2 / 2

Criterion	Max	Score	Notes
Mirrorable artifact source	5	N/A	Module writes a local shell script via cat > $CODER_DIR/slackme; it downloads or installs no binary from a URL. No download-URL variable exists or is needed.
Bring-your-own binary	10	N/A	No tool is downloaded or installed. The script relies on curl already being in the image.
Egress transparency	3	N/A	Module downloads or installs nothing of its own. Runtime API calls to Slack are the module's function, not an install-time download.
Runs without sudo	2	2	Install script writes to $(dirname $(which coder)) and runs chmod +x—no sudo invocation. slackme.sh also never calls sudo. Verified in code.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All three variables have type = string, clear description strings, and slack_message has a sensible default. No validation needed for ID strings or free-form message templates.
Test coverage	4	4	main.test.ts provides comprehensive end-to-end tests: verifies script lands on $PATH, tests usage output, unauthenticated URL display, default/multiline/duration formatting (ms, s, m, hr) via a mock Slack server. Clear testing story.

Overall — 90 / 100

Raw 44 / 49 → round(44 / 49 × 100) = 90

---

Scored against SCORECARD.md on 2026-10-05 with solstice-1.