sequenzy-email-marketing — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited sequenzy-email-marketing (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the task is to operate Sequenzy, not to change Sequenzy's source code. Prefer the sequenzy CLI for supported workflows, treat packages/mcp/src/tools/index.ts as the MCP source of truth when the task goes through MCP tools, and explicitly call out when a requested workflow is not wired in the current implementation.
packages/cli/src/index.tsx as the source of truth for which commands are actually wired.packages/cli/src/commands/ and packages/cli/src/api.ts as the source of truth for CLI behavior, payload shape, and API routes.packages/mcp/src/tools/index.ts as the source of truth for MCP tool names, arguments, and preflight validation.--help text without an attached implementation.sequenzy login for interactive auth and SEQUENZY_API_KEY for automation.Read references/use-cases.md before executing anything non-trivial. The currently implemented CLI flows are:
whoamiaccountcompanies list|get|createlist, add, get, and remove, with list fetching every page by default and supporting tag, segment, and list filterslist, create, add-subscribers, and import alias for bulk list population from emails, JSON, CSV, or newline fileslistlist, create, and count, including --match any, nested filter roots, custom event filters, and saved-segment composition filterslist, get, create, update, and delete, with list supporting label filters and create/update accepting labels, raw HTML, or Sequenzy block JSONlist, get, create, update including label and reply-to updates, schedule, and test, with list supporting label filters, create accepting labels plus raw HTML, Sequenzy block JSON, or prompt-generated content, update accepting labels plus raw HTML or Sequenzy block JSON, and schedule returning a review preview linkupdate_campaign also supports replyTo and replyProfileId, and MCP schedule_campaign schedules draft or already scheduled campaignssearch_subscribers supports list filters through list, listId, or listName; MCP add_subscribers_to_list accepts up to 500 emails per calllist, get, create, update, enable, disable, delete, and cancel-enrollments, including explicit discount action steps, cancellation by subscriber ID or event-property field values, and update branch insertion with tag, list, segment, event, clicked-link, and field conditions; event and clicked-link branch checks can use activityScope (this_sequence, previous_email, ever)generate email, generate sequence, and generate subjectsurls, MCP get_app_urls, and appUrls/url fields on campaign, sequence, template, and company resultslist, add, check, and guideapi-keys createTreat missing subcommands as unsupported even when the noun exists. For example: campaign immediate send, pause/cancel flows, list deletion, and tag mutation are not available through the current CLI handlers. Bulk list population is supported through sequenzy lists add-subscribers and its sequenzy lists import alias, not through subscribers add.
sequenzy whoami or by verifying SEQUENZY_API_KEY is set.url, previewUrl, or appUrls in the tool/CLI output. If needed, generate it with sequenzy urls or MCP get_app_urls.whoami using cached local auth state, sequence creation supporting both --goal and explicit step modes, explicit discount steps requiring Stripe before activation, generated sequences being capped at 10 emails, campaigns test being a stubbed success path in the current backend, and conditional email content requiring block JSON rather than raw HTML.Use SEQUENZY_APP_URL as the dashboard base when it is set; otherwise default to https://sequenzy.com.
Prefer actual URLs returned by the CLI/MCP result:
/dashboard/company/{companyId}/sequences/{sequenceId}/dashboard/company/{companyId}/campaign/{campaignId}/dashboard/company/{companyId}/campaign/{campaignId}?step=review/dashboard/company/{companyId}/emails/{emailId}/dashboard/company/{companyId}/settings/dashboard/company/{companyId}/settings?tab={tab}Useful settings tabs include domain, tracking, localization, integrations, events, tags, goals, sync-rules, api-keys, widgets, and team.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.