Slack Me module

[bpmct]

A discussion dedicated to the Slack Me module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
13 / 25	10 / 20	N/A	8 / 10	56 / 100

Drilldown

Presentation & Onboarding — 13 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	6	README shows basic usage and one custom message example. No examples for different deployment scenarios or major configuration modes.
Coder-context framing	8	7	Explains what the module adds (slackme command for notifications), names both Coder and Slack, shows Coder external auth integration. Minor: could be clearer about where Coder fits in the notification flow.
Visual preview	5	0	No image, GIF, or video. Only an icon reference in frontmatter.

Credential Hygiene — 10 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	No sensitive inputs in the module itself (auth is via Coder external auth). However, Setup section shows inline CODER_EXTERNAL_AUTH_1_CLIENT_SECRET="<your client secret>" in environment variable examples, which are inline secrets in documentation.
Non-hardcoded auth path	4	2	Uses Coder external auth (OAuth), which is a proper auth path. However, the setup documentation still requires pasting client secrets into environment variables, only partially avoiding raw keys in templates.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only writes a shell script to disk.
Bring-your-own binary	5	N/A	Module downloads nothing; it only writes a shell script to disk.
Egress transparency	3	N/A	Module downloads nothing; it only writes a shell script to disk.
Runs without sudo	2	N/A	Module downloads nothing; it only writes a shell script to disk.

Note: All Restricted-Environment criteria are N/A because this module downloads/installs nothing. It only writes a shell script that wraps the existing coder CLI and calls the Slack API at runtime with user-provided credentials.

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	6	Three inputs with clear descriptions. agent_id and auth_provider_id are well-described. slack_message has a sensible default with template variables documented. No validation blocks, but the simple string inputs don't require complex validation.
Test coverage	4	2	TypeScript tests cover end-to-end behavior well (message formatting, authentication flow, duration formatting). No .tftest.hcl files present for Terraform-level testing.

Overall — 56 / 100

Raw 31 / 55 → round(31 / 55 × 100) = 56

Track: Utility (helper module for Slack notifications)

Badge: Needs work

---

Scored against SCORECARD.md on 2026-08-10 with claude-sonnet-4-5.