Slack Integrations, Bots and Permissions Review
Check connected apps for access, usefulness and risk (defensive).
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Review the apps and integrations connected to our Slack workspace as a defensive review of my own workspace; recommend least privilege and removal of what is unneeded, and no workaround of security controls. For each: app name, who installed it, what permissions it has (channels, messages, files, users), when it was last used, and its purpose: [APP_LIST]. Our policy on third-party apps: [POLICY]. Check for apps with broad access to messages or files, apps installed by people who have left, unused apps, apps that duplicate each other, apps that post to many channels, and apps with no clear owner. Rate each high, medium or low with the reason. Base findings on the list and say what is missing, such as last-used dates. Return a table with App, Access, Owner, Last used, Risk and Action, questions to the owners, a message to owners asking them to confirm the app is still needed, and a quarterly review routine. Do not ask me to paste tokens or secrets. Mark permission names and admin screens [VERIFY].
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.