Slack Bot Builder
Build Slack apps using the Bolt framework across Python, JavaScript, and Java. Covers Block Kit for rich UIs, interactive components, slash commands, event handling, OAuth installation flows, and Workflow Builder integration. Focus on best practices for production-ready Slack apps.
When to Use
- User mentions or implies: slack bot
- User mentions or implies: slack app
- User mentions or implies: bolt framework
- User mentions or implies: block kit
- User mentions or implies: slash command
- User mentions or implies: slack webhook
- User mentions or implies: slack workflow
- User mentions or implies: slack interactive
- User mentions or implies: slack oauth
Core Workflow
- Confirm the request matches this skill's trigger, scope, and risk profile.
- Use the topic map to identify the relevant pattern, checklist, or example before writing detailed guidance or code.
- Load
references/full-guidance.md when implementation details, examples, anti-patterns, validation checks, or edge cases are needed.
- Apply only the relevant guidance instead of loading or repeating the entire reference by default.
- Verify the result against any validation checks, limitations, security notes, or platform constraints in the reference.
Topic Map
- Patterns
- Bolt App Foundation Pattern
- Anti_patterns
- Block Kit UI Pattern
- OAuth Installation Pattern
- Socket Mode Pattern
- Workflow Builder Step Pattern
- Sharp Edges
- Missing 3-Second Acknowledgment (Timeout)
- Acknowledge immediately, process later
- For Bolt framework - use lazy listeners
- Not Validating OAuth State Parameter (CSRF)
- Proper state validation
- Exposing Bot/User Tokens
- Never hardcode or log tokens
- Encrypt tokens in database
- Rotate tokens if exposed
- Requesting Unnecessary OAuth Scopes
Reference Map
references/full-guidance.md preserves the complete original guidance, including examples and detailed edge cases.
Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
Progressive Loading
Keep this SKILL.md as the compact routing and workflow entrypoint. Load the reference file only when the user task requires the deeper implementation material.
1---2name: slack-bot-builder3description: Build Slack apps using the Bolt framework across Python,4license: MIT5---67# Slack Bot Builder89Build Slack apps using the Bolt framework across Python, JavaScript, and Java. Covers Block Kit for rich UIs, interactive components, slash commands, event handling, OAuth installation flows, and Workflow Builder integration. Focus on best practices for production-ready Slack apps.1011## When to Use12- User mentions or implies: slack bot13- User mentions or implies: slack app14- User mentions or implies: bolt framework15- User mentions or implies: block kit16- User mentions or implies: slash command17- User mentions or implies: slack webhook18- User mentions or implies: slack workflow19- User mentions or implies: slack interactive20- User mentions or implies: slack oauth2122## Core Workflow231. Confirm the request matches this skill's trigger, scope, and risk profile.242. Use the topic map to identify the relevant pattern, checklist, or example before writing detailed guidance or code.253. Load `references/full-guidance.md` when implementation details, examples, anti-patterns, validation checks, or edge cases are needed.264. Apply only the relevant guidance instead of loading or repeating the entire reference by default.275. Verify the result against any validation checks, limitations, security notes, or platform constraints in the reference.2829## Topic Map30- Patterns31- Bolt App Foundation Pattern32- Anti_patterns33- Block Kit UI Pattern34- OAuth Installation Pattern35- Socket Mode Pattern36- Workflow Builder Step Pattern37- Sharp Edges38- Missing 3-Second Acknowledgment (Timeout)39- Acknowledge immediately, process later40- For Bolt framework - use lazy listeners41- Not Validating OAuth State Parameter (CSRF)42- Proper state validation43- Exposing Bot/User Tokens44- Never hardcode or log tokens45- Encrypt tokens in database46- Rotate tokens if exposed47- Requesting Unnecessary OAuth Scopes4849## Reference Map50- `references/full-guidance.md` preserves the complete original guidance, including examples and detailed edge cases.5152## Limitations53- Use this skill only when the task clearly matches the scope described above.54- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.55- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.5657## Progressive Loading58Keep this `SKILL.md` as the compact routing and workflow entrypoint. Load the reference file only when the user task requires the deeper implementation material.
newmindsgroup