Slack Me module

[bpmct]

A discussion dedicated to the Slack Me module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
13 / 25	20 / 20	N/A	10 / 10	78 / 100

Drilldown

Presentation & Onboarding — 13 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README shows basic usage and a custom message example with sensible defaults. Both major configuration modes (default message vs custom message) are documented.
Coder-context framing	8	1	README mentions Coder in the title and setup instructions, but does not explain what the module adds on top of Coder or show where Coder fits in the developer flow. The description is minimal.
Visual preview	5	0	No image, GIF, or video in the README. Only an icon reference in frontmatter.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs in the module itself. The setup instructions show environment variables for Coder deployment configuration (CODER_EXTERNAL_AUTH_1_CLIENT_SECRET) but these are not module inputs. No inline secrets in README examples.
Non-hardcoded auth path	4	4	Uses Coder's external auth provider mechanism (coder external-auth access-token) which is OAuth-based, avoiding raw API keys in templates.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only writes a shell script wrapper that calls existing coder and curl commands.
Bring-your-own binary	5	N/A	Module downloads nothing; it only writes a shell script wrapper that calls existing coder and curl commands.
Egress transparency	3	N/A	Module downloads nothing; it only writes a shell script wrapper that calls existing coder and curl commands.
Runs without sudo	2	2	The install script writes to $CODER_DIR (derived from which coder) and sets executable permissions without sudo. The slackme.sh script runs entirely as the user. No sudo invocations anywhere.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All three inputs (agent_id, auth_provider_id, slack_message) have clear descriptions and sensible defaults where appropriate. The slack_message default includes template variables.
Test coverage	4	4	Comprehensive TypeScript tests in main.test.ts cover business logic (message formatting, duration display, authentication flow, path installation). Tests verify executable placement, usage output, authentication errors, and multiple duration formatting scenarios.

Overall — 78 / 100

Raw 43 / 55 → round(43 / 55 × 100) = 78

---

Scored against SCORECARD.md on 2026-07-15 with claude-sonnet-4-5.