openapi-messaging — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited openapi-messaging (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
All services use a Bearer token (see the openapi-auth skill). Every send is an outward-facing, paid action: always confirm recipient, content and cost with the user before sending.
https://sms.openapi.comPOST /IT-messages (Italy), POST /ES-messages (Spain), POST /WW-messages (worldwide)POST /otp — OTP verification messagesGET /messages, GET /messages/{id} — sent messages and delivery statusFeatures: custom sender, E.164 validation, GSM-7/UCS-2 detection with automatic segmentation, `dry_run` for free testing, webhook delivery callbacks. Messages expire after 48h (status EXPIRED). Worldwide pricing is computed post-sending and requires a minimum credit balance. SMS v1 (ws.messaggisms.com) is deprecated.
curl -s -X POST https://sms.openapi.com/IT-messages \
-H "Authorization: Bearer $OPENAPI_TOKEN" \
-H 'Content-Type: application/json' \
-d '{"sender": "MyBrand", "body": "Hello!", "recipients": ["+39333…"], "options": {"dry_run": true}}'https://pec.openapi.itActivate and manage Legalmail certified e-mail boxes (creation, renewal, configuration).
https://ws.pecmassiva.comBulk certified e-mail sending; check delivery-verification and receipt-verification status per message.
https://ws.ufficiopostale.comPhysical mail via Poste Italiane. Same pattern per product: POST /<product>/ (create, returns prices) → PATCH /<product>/{id} (confirm, or pass autoconfirm: true) → status callbacks to your callback URL → GET /<product>/{id}/accettazione (acceptance receipt).
Products: raccomandate and raccomandate_smart (registered mail), telegrammi, ordinarie, prioritarie, posta_massiva, posta_massiva_top, atti_giudiziari (judicial acts, with digital return receipt). Helpers: GET /pricing/, GET /nazioni/, GET /covers/, GET /dug/. Error responses include data.wrong_fields[] pinpointing invalid fields.
Full specs: https://console.openapi.com/oas/en/smsv2.openapi.json · …/pec.openapi.json · …/pecmassiva.openapi.json · …/ufficiopostale.openapi.json
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.