taisly-social-media-posting — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited taisly-social-media-posting (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Full documentation: https://docs.taisly.com/docs/mcp
Prefer the existing Taisly MCP connection. OAuth already provides access; do not install the package, request an API key, or run local setup/checkin tools when remote MCP is available.
If it is not connected, help the user add https://app.taisly.com/mcp as a remote Streamable HTTP MCP server with OAuth in a compatible client. Client settings or workspace policies may require human action. After authorization, refresh tools according to the client's instructions.
taisly_auth_status and taisly_platforms_list. An empty account list is not a login failure.connectUrl from taisly_platform_connect_start, wait for browser approval, then check connection.taisly_platform_schema and validate the public video URL, caption, destinations and schedule with taisly_posts_validate.taisly_posts_create with confirmed: true.historyId and check taisly_posts_status. Accepted is not published; report each destination's PENDING, SUCCESS or FAILED result accurately. A scheduled post has not yet been published.Only call tools advertised by the server. Remote MCP does not expose taisly_agent_setup_start or taisly_agent_checkin. Never print credentials. If access expires, use the client's OAuth reconnect action, not CLI installation or an API-key fallback. Do not blindly retry creation after a timeout; check history first.
Remote MCP cannot read local files or private chat attachments. Ask for a public downloadable video URL. If the user explicitly needs a local-file workflow, explain the optional local MCP or CLI package before installing anything.
Package guide: https://docs.taisly.com/en/docs/agents/agent-kit REST API: https://docs.taisly.com/en/docs/api
API keys and the npm package are developer alternatives, not prerequisites for remote MCP.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.