We use to do do automated sec audits weekly on the code base and post the result on slack

so is slack posting an MCP tool it has? or a skill it just knows?

In Claude it is a "connector" which is essentially an mcp tool.