basecamp-skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited basecamp-skills (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Agent skills for Basecamp, HEY, and Fizzy. Each skill teaches a coding agent to work in one product through that product's CLI.
npx skills add basecamp/skillsThat installs every skill in skills/. See install.md for the full setup, including installing and authenticating each CLI.
| Skill | Product | Published from | Description |
|---|---|---|---|
| basecamp | Basecamp | basecamp-cli | Interact with Basecamp via the Basecamp CLI. Full API coverage: projects, todos, cards, messages, files, schedule, check-ins, timeline, recordings, templates, webhooks, subscriptions, lineup, chat, pings, gauges, assignments, notifications, bookmarks, bubble-up, drafts, notes, calendars, and accounts. |
| basecamp-doctor | Basecamp | basecamp-cli | Diagnose Basecamp CLI, authentication, and agent-plugin health. |
| hey | HEY | hey-cli | Interact with HEY via the HEY CLI. Read and send email; manage contacts, boxes, labels, collections, calendars, todos, habits, time tracking, and journal entries. Missing from `skills/` right now (see below). |
| fizzy | Fizzy | fizzy-cli | Interact with Fizzy via the Fizzy CLI. Manage boards, cards, columns, comments, steps, reactions, tags, users, notifications, pins, webhooks, and account settings. Not published here yet (see below). |
hey is absent because of a sync bug (#5): the basecamp-cli and hey-cli release syncs shared one .managed-skills manifest, so each product's release deleted the other product's skills. Fixes are in flight in both CLIs. The skill returns automatically on the first hey-cli release after that fix ships. Until then, get it from hey-cli/skills/hey, or run hey skill install, which installs it from the CLI itself.
fizzy is not published here yet: fizzy-cli's release has no skills sync. One is proposed in fizzy-cli#214; once it ships, the skill arrives with the next fizzy-cli release. Get it from fizzy-cli/skills/fizzy, or run fizzy skill install.
Each skill drives its product's CLI, so install and authenticate the CLI for the products you use. One is enough; the skills for the others sit idle.
Basecamp — basecamp-cli (install guide)
curl -fsSL https://basecamp.com/install-cli | bash # or: brew install --cask basecamp/tap/basecamp-cli
basecamp auth loginHEY — hey-cli (install guide)
curl -fsSL https://hey.com/install-cli | bash # or: brew install --cask basecamp/tap/hey
hey auth loginFizzy — fizzy-cli (install guide)
curl -fsSL https://raw.githubusercontent.com/basecamp/fizzy-cli/master/scripts/install.sh | bash # or: brew install --cask basecamp/tap/fizzy
fizzy setup # personal access token, account, default boardSkills are never edited in this repo; a change made here is overwritten by the next release of the CLI that owns it. Open issues and pull requests against the skill's source instead:
Issues about this repo itself (the README, install.md, the plugin manifest, or the publishing) belong here.
This repo is a publish target. On each release, a CLI's scripts/sync-skills.sh copies its skills/ tree into skills/ here, records the directories it owns in a manifest, and commits straight to main. Only the README, install.md, AGENTS.md, and .claude-plugin/ are written by hand.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.