I believe AWS uses the Github API to determine when projects compromise their (or their users) AWS credentials and takes steps to (i.e. revokes credentials) mitigate disaster. Perhaps Slack needs to start doing the same for their bots?