feat(slack): new Slack notification/ChatOps integration

Slack Web API, 8 commands: send message (text/Block Kit), list/create channel, invite to channel, set topic, get user, add reaction. Bot-token auth, stdlib-only. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-11 23:28:25 +02:00
parent 26cd02d77a
commit e3c15ae972
9 changed files with 526 additions and 0 deletions
@@ -0,0 +1,97 @@
+id: slack
+name: Slack
+version: 1.0.0
+description: "Slack (Web API) — SOC notification and ChatOps: post messages (text or Block Kit), list/create channels, invite users, set channel topics, look up users, and add reactions. Bot-token authentication; stdlib-only, no extra Python dependencies."
+changelog: "1.0.0 — Initial release: send message, list/create channel, invite to channel, set topic, get user, add reaction."
+category: notification
+
+# Per-instance configuration. The bot token (xoxb-...) is sent as
+# 'Authorization: Bearer <bot_token>'. Needs scopes such as chat:write,
+# channels:read, channels:manage, users:read, users:read.email, reactions:write.
+config_schema:
+  properties:
+    bot_token:
+      type: string
+      description: "Slack bot token (xoxb-...)"
+      x-soar-sensitive: true
+  required:
+    - bot_token
+
+commands:
+  - id: send_message
+    name: slack-send-message
+    description: "Post a message to a channel or user (text and/or Block Kit blocks)."
+    inputs_schema:
+      properties:
+        channel: { type: string, description: "Channel ID, channel name (#alerts), or user ID for a DM" }
+        text: { type: string, description: "Message text (fallback text when blocks are used)" }
+        blocks: { type: string, description: "Optional Block Kit blocks as a JSON array string" }
+        thread_ts: { type: string, description: "Optional parent message ts to reply in a thread" }
+      required: [channel]
+    outputs_schema: { properties: {} }
+  - id: list_channels
+    name: slack-list-channels
+    description: "List channels (public and private the bot can see)."
+    risk: read
+    inputs_schema:
+      properties:
+        types: { type: string, description: "Comma-separated channel types (default 'public_channel,private_channel')" }
+        limit: { type: number, description: "Max channels (default 200)" }
+      required: []
+    outputs_schema: { properties: {} }
+  - id: create_channel
+    name: slack-create-channel
+    description: "Create a new channel."
+    inputs_schema:
+      properties:
+        name: { type: string, description: "Channel name (lowercase, no spaces)" }
+        is_private: { type: boolean, description: "Create a private channel (default false)" }
+      required: [name]
+    outputs_schema: { properties: {} }
+  - id: invite_to_channel
+    name: slack-invite-to-channel
+    description: "Invite one or more users to a channel."
+    inputs_schema:
+      properties:
+        channel: { type: string, description: "Channel ID" }
+        users: { type: string, description: "Comma-separated user IDs to invite" }
+      required: [channel, users]
+    outputs_schema: { properties: {} }
+  - id: set_channel_topic
+    name: slack-set-channel-topic
+    description: "Set a channel's topic."
+    inputs_schema:
+      properties:
+        channel: { type: string, description: "Channel ID" }
+        topic: { type: string, description: "New topic text" }
+      required: [channel, topic]
+    outputs_schema: { properties: {} }
+  - id: get_user
+    name: slack-get-user
+    description: "Look up a user by ID or email address."
+    risk: read
+    inputs_schema:
+      properties:
+        user_id: { type: string, description: "User ID (provide this or email)" }
+        email: { type: string, description: "Email address (provide this or user_id)" }
+      required: []
+    outputs_schema: { properties: {} }
+  - id: add_reaction
+    name: slack-add-reaction
+    description: "Add an emoji reaction to a message."
+    inputs_schema:
+      properties:
+        channel: { type: string, description: "Channel ID of the message" }
+        timestamp: { type: string, description: "Message ts" }
+        emoji: { type: string, description: "Emoji name without colons (e.g. eyes)" }
+      required: [channel, timestamp, emoji]
+    outputs_schema: { properties: {} }
+
+  - id: test_connection
+    name: slack-test-connection
+    description: "Verify connectivity and the bot token (used by the Test button)."
+    risk: read
+    inputs_schema:
+      properties: {}
+      required: []
+    outputs_schema: { properties: {} }