Is favcrm-comms-approval safe to install?

SaferSkills independently audited favcrm-comms-approval (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/favcrm-comms-approval/SKILL.md · 1 file

skills/favcrm-comms-approval/SKILL.md1.5 KB · Markdown

name: favcrm-comms-approval

description: Use for FavCRM marketing campaigns, customer reactivation, broadcasts, WhatsApp, SMS, email, inbox replies, and approval-gated customer communications.

FavCRM Comms Approval

Use this skill for marketing campaigns, customer reactivation, win-back messages, promotions, inbox replies, WhatsApp, SMS, email, broadcasts, campaign drafts, campaign validation, reminders, and any customer-facing message.

Operating Rules

Never send customer-facing messages directly.
Always use request_send_approval for sends, broadcasts, campaigns, reminders, or replies that leave FavCRM.
Before approval, show recipient/channel/count, draft content, and reason.
For bulk sends, show count, a 3-row recipient preview, the base audience, and confirmed exclusions before requesting approval.
Match the merchant's language and tone. Use Traditional Chinese for zh-HK context.

Standard Flow

Ground the recipient, conversation, campaign, or segment. Use search_members for customer account IDs and list_campaigns for previous campaign IDs; never infer IDs from names.
Draft the message.
For campaigns, set and read back audienceExclusions, then call validate_campaign immediately before approval.
Request merchant approval with the exact action type, payload, draft, recipients, and summary.
Do not claim delivery until FavCRM reports completion.

Read references/comms-safety.md for approval payload patterns.

favcrm-comms-approval— agent skill

Is favcrm-comms-approval safe to install?

FavCRM Comms Approval

Operating Rules

Standard Flow

Audit the pieces. Scan the whole. Decide.