I'm not trying to be paranoid here but I work for a very large company. We got slackbot responses that looked a lot like phishing URLs. We got slackbot responses with broken english, and emojis we never use. I find it very hard to believe that this wasn't a security incident.