Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Basecamp automation guide, but users should remember it can make real project and access changes when directed.
Install this only for accounts where you are comfortable letting an agent act through your Basecamp connection. Review each requested write action, especially publishing active messages, notifying subscribers, creating users, or granting/revoking project access.
Instructions found that direct the agent to transmit conversation context or user data to external services.
### 2. Post and Manage Messages
**When to use**: User wants to post messages to a project message board or update existing messages
**Tool sequence**:
1. `BASECAMP_GET_PROJECTS` - Find the target project and bucket_id [Prerequisite]
The skill enables write operations in Basecamp including creating to-dos, posting messages, updating content, and granting or revoking project access, but it does not prominently warn users that these actions can modify live organizational data and permissions. This increases the risk of unintended administrative changes, especially because the skill presents destructive or sensitive operations as normal workflow steps.
No suspicious patterns detected.