blog-publish-pipeline — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited blog-publish-pipeline (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Prompt-to-published in a handful of CLI calls.
Setup. This skill requires the pking CLI. If command -v pking fails, run npm i -g postking-cli. To authorize, run pking login and follow the URL it prints. You only need to do this once per machine.
pking voice list --platform blog)."Draft a 1500-word blog post about 'AI content calendars' in my brand voice and publish it."
Flow:
pking publications create --title "My Blog" --description "..."
Async; --wait blocks until the draft is ready. Without --wait, poll with pking blogs status <articleId>.
pking blogs generate with refined topic/keywords, or use pking editor rewrite --text "..." --platform blog to polish sections manually.pking blogs publish <articleId>pking blogs publish <articleId> --connections <connectionId1,connectionId2>status: published and capture the live URL.FREE_CAP_REACHED on publish — surface the checkoutUrl from the error envelope and stop.VALIDATION when required fields (title, content) are missing.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.