clix-user-management — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited clix-user-management (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to help developers implement Clix user identification and user properties so campaigns can use user.* variables and audience filters, and so user identity is consistent across devices and sessions.
anonymous; setting a user ID converts the anonymous user into an identified user and links prior activity.
setUserId(null) on logout; handle logout in applogic only; when a different user logs in, call setUserId(newUserId) to switch.
can throw—handle errors.
If Clix MCP tools are available, treat them as the source of truth:
clix-mcp-server:search_docs for conceptual behavior and logout guidanceclix-mcp-server:search_sdk for exact SDK signatures per platformIf MCP tools are not available, use the bundled references:
references/user-management-contract.mdreferences/logout-and-switching.mdreferences/property-schema.mdreferences/implementation-patterns.mdreferences/personalization-and-audience.md
references/debugging.mdUser management progress:
- [ ] 1) Confirm platform(s) and auth model (anonymous browsing? login? shared devices?)
- [ ] 2) Propose user plan (when setUserId/removeUserId, properties, logout policy)
- [ ] 3) Validate plan (PII, property types, logout rules)
- [ ] 4) Implement (platform-correct calls + error handling)
- [ ] 5) Verify (switching works, properties appear, campaigns can target/personalize)Ask only what’s needed:
email)
Return a compact table:
Create user-plan.json in .clix/ (recommended) or project root.
For agents: locate scripts/validate-user-plan.sh in the installed skill directory and run:
# From project root:
bash <skill-dir>/scripts/validate-user-plan.sh .clix/user-plan.json
# Or if in root:
bash <skill-dir>/scripts/validate-user-plan.sh user-plan.jsonIf validation fails: fix the plan first, then implement.
Use MCP to fetch the exact signatures per platform, then:
setUserId(...) after login/signup is confirmed.setUserId(null)).setUserId(newUserId) after the new loginsucceeds.
setUserIdsetUserId is called once and stableuser.* personalization~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.