Investigate Slack incoming webhook URL

Build 1.0.0 · Scan 2026-09-30T23:59:31.831Z

2 distinct recorded findings; 2 have inspectable metadata. Locations are representative, not an inventory of every source match.

A Slack incoming-webhook URL. Anyone with it can post messages into the connected channel; treat as a secret and rotate.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Static string match

Representative location

classes2.dex

Recorded match

Pattern recorded; identifying value redacted.

Detector rule

slack_webhook

Recorded file locations