skool-headless-reader — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skool-headless-reader (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when a task asks to inspect Skool communities, find revenue opportunities in Skool, summarize Skool posts, or mine AI automation communities for ThumbGate acquisition signals. It uses direct HTTP reads and the local MCP connector instead of the user's logged-in browser, so the user can keep working.
SKOOL_COOKIE environment variable when a private group requires auth. Never print, commit, or persist cookies.Read a public community:
node scripts/skool-reader.js --community ai-automation-society --limit 10 --format jsonRank ThumbGate revenue signals:
node scripts/skool-reader.js --url https://www.skool.com/ai-automation-society --category "Support Needed" --signals --format markdownUse --post-limit to read more posts before returning the top --limit signals.
Run the local MCP server:
node adapters/skool/server-stdio.jsUseful MCP tools:
skool_read_community: return normalized categories, posts, and engagement.skool_revenue_signals: rank posts for ThumbGate acquisition opportunities.skool_post_detail: read a single Skool post URL.Support Needed, Hire Me / Looking For Hire, Wins, and high-comment posts.If a group is not publicly SSR-readable, supply an operator-provided cookie header through the environment without storing it:
SKOOL_COOKIE='skool_session=...' node scripts/skool-reader.js --community private-community --signalsNever save that cookie in repo files, memories, PR text, logs, or test fixtures.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.