Slack Me module

[bpmct]

A discussion dedicated to the Slack Me module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
13 / 25	10 / 20	N/A	8 / 10	56 / 100

Drilldown

Presentation & Onboarding — 13 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	6	README shows basic usage and one custom message example. No examples for different deployment scenarios or major configuration modes.
Coder-context framing	8	7	Explains what the module adds (slackme command for notifications), names both Coder and Slack, shows Coder external auth integration. Minor: could be clearer about where Coder fits in the notification flow.
Visual preview	5	0	No image, GIF, or video. Only an icon reference in frontmatter.

Credential Hygiene — 10 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	No sensitive inputs in the module itself (auth is via Coder external auth). However, README setup examples show CODER_EXTERNAL_AUTH_1_CLIENT_SECRET="<your client secret>" as inline placeholder, which counts as inline secrets in examples.
Non-hardcoded auth path	4	2	Uses Coder external auth (coder external-auth access-token), which is OAuth-based and avoids raw keys in templates. However, the setup still requires pasting client secrets into Coder deployment env vars, not fully avoiding raw keys.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only writes a shell script to disk.
Bring-your-own binary	5	N/A	Module downloads nothing; it only writes a shell script to disk.
Egress transparency	3	N/A	Module downloads nothing; it only writes a shell script to disk.
Runs without sudo	2	N/A	Module downloads nothing; it only writes a shell script to disk.

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	6	Three inputs with clear descriptions. agent_id and auth_provider_id are required strings. slack_message has sensible default with template variables. No validation blocks, but inputs are simple enough.
Test coverage	4	2	TypeScript tests cover end-to-end behavior (script installation, message formatting, duration formatting, Slack API interaction). No .tftest.hcl files present for Terraform-level business logic testing.

Overall — 56 / 100

Raw 31 / 55 → round(31 / 55 × 100) = 56

Track: Utility (helper module for Slack notifications, not an agent or IDE)

Normalized score: This is a utility module. Restricted-Environment Readiness is N/A (all 20 points excluded) because the module downloads nothing. Denominator: 25 + 20 + 10 = 55. Raw score: 13 + 10 + 8 = 31. Normalized: round(31 / 55 × 100) = 56.

---

Scored against SCORECARD.md on 2026-08-17 with claude-sonnet-4-5.