Slack Me module

[bpmct]

A discussion dedicated to the Slack Me module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
13 / 25	10 / 20	N/A	8 / 10	56 / 100

Drilldown

Presentation & Onboarding — 13 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README shows basic usage and custom message example with sensible defaults
Coder-context framing	8	1	Mentions Coder in setup instructions and template import, but does not explain what the module adds on top of Coder or show where Coder fits in the developer flow
Visual preview	5	0	No image, GIF, or video. Only an icon reference in frontmatter

Credential Hygiene — 10 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	No module inputs are secrets (uses external auth). README setup examples show CODER_EXTERNAL_AUTH_1_CLIENT_SECRET="<your client secret>" as inline placeholder, which counts as inline secrets per rubric, capping at half
Non-hardcoded auth path	4	2	Uses Coder external auth (auth_provider_id) which is OAuth-based, but documentation of this path is minimal—only implicit in the setup steps

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it writes a shell script wrapper that calls existing coder and curl binaries
Bring-your-own binary	5	N/A	Module downloads nothing; it writes a shell script wrapper that calls existing coder and curl binaries
Egress transparency	3	N/A	Module downloads nothing; it writes a shell script wrapper that calls existing coder and curl binaries
Runs without sudo	2	0	Script writes to $CODER_DIR (dirname of coder binary, typically /usr/bin) which requires root. No documented non-root path or fallback

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	6	Three inputs with clear descriptions. agent_id and auth_provider_id are required strings. slack_message has sensible default with template variables documented. No validation blocks, but inputs are simple enough
Test coverage	4	2	TypeScript tests in main.test.ts cover end-to-end behavior (script execution, message formatting, duration formatting). No .tftest.hcl file for Terraform business logic testing

Overall — 56 / 100

Raw 31 / 55 → round(31 / 55 × 100) = 56 → 57 / 100

Correction: Raw score is 31 (13 + 10 + 8). Denominator after N/A is 55 (25 + 20 + 10). 31 / 55 × 100 = 56.36 → 56 / 100

Re-correction for Runs without sudo: This criterion applies because the module executes a script. The script writes to $CODER_DIR which is typically a system directory requiring root. Score remains 0.

Final: 31 / 55 → 56 / 100

---

Scored against SCORECARD.md on 2026-08-03 with claude-sonnet-4-5.