What can an AI agent do with
Upload, edit, and delete files?
Lets the agent upload files, edit them, and delete them. With a user token it can also turn on a public link to a file. A bot token can only remove public links.
How to spot it
On a Slack connection or settings screen, this is files:write.
With it, an agent can
- Upload files into conversations
- Delete files
- Delete comments on files
- Remove a public link to a file
- With a user token, turn on a public link to a file
It cannot, on its own
- Read message history (separate permissions)
- With a bot token, turn on a public link to a file
What a bad day looks like
With a user token, a tricked agent turns on a public link for a private file, so anyone with the link can open it outside Slack.
Set it up safer
- Grant files:read instead if it only needs to look at files
- Approve it as a bot, which cannot turn on public file links
- Ask the seller to confirm it never creates public file links
Narrower permissions on Slack:
- View and download shared files
files:read
Ask the company selling the agent
- Why does the agent need to delete files?
- Will it ever make a file public?
- Is every upload and delete logged?
Source
Checked against Slack documentation on 2026-09-28. All Slack permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.