Security audit
postroom
Security checks for vulnerabilities and agentic risk
Overview
This social-posting integration clearly limits scheduling to posts you explicitly approve and contains no executable install code.
Start with read-only access and confirm your workspace and account names. Enable write access when needed, keep tool approvals enabled and inspect each exact preview before approving scheduling. Postroom receives requested workspace data, and its hosted tools can change independently of this bundle; their server-side behavior was not verified.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.