Investigate Slack token

Build 0.49.0 · Scan 2026-10-06T20:45:47.632Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

A Slack token grants workspace API access. If still active it can read or post messages and should be rotated.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Static string match

Representative location

assets/bin/Data/Managed/Metadata/global-metadata.dat

Recorded match

xoxb-•••••••• (40+ chars, redacted)

Detector rule

slack_token

Recorded file locations