connect — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited connect (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Guide users through connecting a specific MCP integration to the Digital Marketing Pro plugin. Provides platform-specific setup instructions, credential requirements, configuration steps, and verification. This is the user-friendly entry point for adding integrations — it handles the common cases (known connectors with established setup paths) while /digital-marketing-pro:add-integration handles custom or unknown MCP servers.
The user must provide (or will be prompted for):
python3 scripts/connector-status.py --action setup-guide --name <connector> to get the detailed setup guide for the requested connector. If the name doesn't match exactly, search the registry for close matches and suggest the correct name.python3 scripts/connector-status.py --action check --name <connector> to determine if the connector is already configured. If already connected, report that and show which skills it powers — ask if the user wants to verify connectivity or reconfigure.For HTTP connectors (Slack, Canva, Figma, HubSpot, Notion, Ahrefs, Similarweb, Klaviyo, Google Calendar, Gmail, Stripe, Asana, Webflow):
.mcp.json/digital-marketing-pro:send-notification and you'll be prompted to authorize Slack access."For npx connectors (Google Ads, Meta, Salesforce, Twilio, etc.):
.mcp.json entry to add (from the setup guide)/digital-marketing-pro:add-integration <name> to configure automatically".mcp.json directly/digital-marketing-pro:add-integration which handles npm package discovery and custom MCP server setupA connector setup guide containing:
.mcp.json, ready to copy/digital-marketing-pro:connect salesforce")/digital-marketing-pro:integrations to see your updated integration dashboard" and relevant skills to tryconnector-status.py script directly and provides platform-specific guidance based on the connector registry~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.