membership-push-broadcast — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited membership-push-broadcast (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are an assistant that executes this skill workflow for the user.
You MUST execute the required tool workflow and return the output in the required format sections. Do not skip required steps and do not replace the required report/template with a short summary.
Prevent pushes sent by mistake or poorly written: a workflow with preview, review, validation, send, and receipt confirmation. This skill is for membership-wide broadcasts.
READ_WRITE.classic_create_push_broadcast accepts message, optional platform, optional schedule, optional action, and optional filters. It sends to all eligible app users unless platform/filters narrow the audience. The response returns only {result, generated_in} — no broadcast ID, no recipient count.
For pushes to specific users or subscription-status audiences, use membership-push-targeted instead.
message (required): the full push text (< 150 charactersrecommended, max 255).
platform (optional): all, ios, android, pwa, or an arraysuch as ["ios", "pwa"]. Use one push call for multiple platforms.
schedule (optional): immediate by default. For delayed sends,require a timezone offset in send_at.
action (optional): open_app, external_link, or section.filters (optional): filters.native for iOS/Android andfilters.pwa for PWA. Supported filters are period_launch, language, and native-only zones/no_push. Group filters are not available on membership apps.
classic_list_active_subscriptions first to show approximate reach.
Follow the sequence below exactly when those tools are available for the request context.
cms_list_cms_sections first with typesarticle, photo, video, sound, maps, agenda; if no match is found, call cms_list_sections with the same types. Ask the user to pick if ambiguous.
https://... URL.message and render it to the user in a"what the end user will see" format.
"lorem"), and over-long content.
classic_list_active_subscriptions to show approximate reach. This is an estimate of active subscribers, not the opted-in push audience — flag this to the user.
classic_create_push_broadcast with message, optional platform,optional schedule, optional action, and optional filters.
code, hint,retryable) and retry only once if retryable=true.
classic_create_push_broadcastclassic_list_active_subscriptions (optional, for audience estimate)cms_list_cms_sections, cms_list_sections (optional, for section tap actions)The final answer MUST include all sections shown in this output template, in the same order.
## Push broadcast — draft
💬 **Message**: "Season 3 is out — 8 new episodes now in the app"
📱 **Platform**: all
⏱️ **Send**: now
🔗 **Tap action**: open app
🎯 **Target**: all eligible users (active-subs est.: 12,430)
→ Confirm send? (yes/no)
---
## Push sent ✅
- Accepted by API (result: ok, generated_in: 142 ms)
- Note: the API does not return a broadcast ID or a delivery count;
delivery is asynchronous to opted-in devices (a subset of active
subscribers).Do not replace this output with a one-line answer.
message or placeholder content ("test", "lorem").message <= 255 characters; recommend < 150 characters.a reinforced confirmation.
schedule.send_at MUST include the MCP clientuser's timezone offset, e.g. 2026-05-28T09:30+02:00. Do not send a naive datetime and do not pre-convert it to UTC.
platform as an arraywhen multiple platforms are requested.
zones or no_push.a group, say it is not supported.
membership-traffic-report in 24h to measure the push's impact onlaunches/sessions.
membership-subscription-audit if the push targeted at-risk subs —to see if churn reduced.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.