Skills recoup-platform-api-access
📦

recoup-platform-api-access

Content revision r1 High Risk ⚙️ External commands🌐 Network access🔑 Env variables

Access Recoup Platform Data and Connectors

Recoup data and connected services require precise authentication, identifiers, and endpoint schemas. This skill guides reliable retrieval and approved external actions.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "recoup-platform-api-access" from https://skillstore.io/skills/recoupable-recoup-platform-api-access.md and its manifest at https://skillstore.io/api/skills/recoupable-recoup-platform-api-access/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/recoupable-recoup-platform-api-access.md Signed manifest GET /api/skills/recoupable-recoup-platform-api-access/manifest Signed lockfile GET /api/skills/recoupable-recoup-platform-api-access/lockfile

Test it

Using "recoup-platform-api-access". Verify my account and list the artists on my roster.

Expected outcome:

Account verified. The roster artists are listed with their account identifiers. No external changes were made.

Using "recoup-platform-api-access". Find similar artists and audience geography for the selected artist.

Expected outcome:

The report includes retrieved similar artists and available audience regions. Missing sources are identified without estimates.

Using "recoup-platform-api-access". Prepare to update my campaign sheet with current social metrics.

Expected outcome:

The connector is available. The required fields and proposed row changes are ready for confirmation before execution.

Security Audit

High Risk
v2 • 8/10/2026 Open versioned report

All 52 static findings are false positives caused by Markdown backticks, declared Recoup URLs, or scoped credential use over HTTPS. One high-severity semantic issue remains because external writes and email sends lack a mandatory confirmation gate.

1
Files scanned
131
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

High
SKILL.md:83-92SKILL.md:94-107
External Writes Lack Mandatory Confirmation
The skill may edit documents, send email, or publish social content after a phrase trigger, without requiring final user confirmation. This can cause unintended changes.
The instructions define write-capable connector actions and direct email delivery. They provide trigger phrases but no mandatory confirmation step before execution.

Risk Factors

⚙️ External commands (44)
SKILL.md:9 SKILL.md:10 SKILL.md:14 SKILL.md:15 SKILL.md:16 SKILL.md:18-21 SKILL.md:21-30 SKILL.md:30 SKILL.md:33 SKILL.md:34 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:40-42 SKILL.md:42-43 SKILL.md:43 SKILL.md:49 SKILL.md:55-56 SKILL.md:56-59 SKILL.md:59-60 SKILL.md:60-61 SKILL.md:61-62 SKILL.md:62-72 SKILL.md:72-74 SKILL.md:74-77 SKILL.md:77-79 SKILL.md:79 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:88 SKILL.md:89-91 SKILL.md:91 SKILL.md:96 SKILL.md:100 SKILL.md:103-109 SKILL.md:109-111 SKILL.md:111 SKILL.md:112 SKILL.md:113 SKILL.md:114-115 SKILL.md:115-116 SKILL.md:116
🌐 Network access (6)
SKILL.md:9 SKILL.md:10 SKILL.md:20 SKILL.md:75 SKILL.md:76 SKILL.md:107
🔑 Env variables (2)
SKILL.md:19 SKILL.md:104
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/recoupable-recoup-platform-api-access/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/recoupable-recoup-platform-api-access/security.svg)](https://skillstore.io/skills/recoupable-recoup-platform-api-access?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/recoupable-recoup-platform-api-access?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/recoupable-recoup-platform-api-access/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/recoupable-recoup-platform-api-access.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

recoupable. (2026). recoup-platform-api-access security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/recoupable-recoup-platform-api-access/audits/2

BibTeX citation

@techreport{recoupable-recoupable-recoup-platform-api-access-2026, author = {recoupable}, title = {recoup-platform-api-access security audit report (audit version 2)}, institution = {Skillstore}, year = {2026}, number = {2}, url = {https://skillstore.io/skills/recoupable-recoup-platform-api-access/audits/2}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "recoup-platform-api-access security audit report (audit version 2)" version: "unspecified" type: report authors: - name: "recoupable" date-released: "2026-08-10" url: "https://skillstore.io/skills/recoupable-recoup-platform-api-access/audits/2" identifiers: - type: other value: "skillstore:recoupable-recoup-platform-api-access:audit:2" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance

What You Can Build

Review an artist roster

Verify the account, list roster artists, and retrieve available social metrics without inventing missing data.

Research artist opportunities

Query Recoup research resources for audience geography, similar artists, and available public profile data.

Deliver operational updates

Inspect connector schemas before updating approved documents, spreadsheets, or email reports.

Try These Prompts

Check my roster 
Using Recoup, verify my account and list roster artists. Report only returned names and account identifiers. Do not modify anything.
Research an artist 
Research {artist} through Recoup. Return available audience geography, similar artists, and public social metrics. Clearly identify missing sources.
Inspect a connector action 
Find the connector action for updating this Google Sheet: {url}. Show connection status and required parameters. Do not execute it yet.
Run an approved reporting workflow 
After I confirm, scrape current metrics for {artist}, summarize changes, update {document_url}, and email {recipients}. Verify every action result.

Best Practices

  • Resolve roster artists with account identifiers before requesting artist subresources.
  • Retrieve the current connector parameter schema before every external action.
  • Confirm destinations and payload summaries before document edits, messages, or social posts.

Avoid

  • Do not invent artists, metrics, endpoint paths, or placeholder values.
  • Do not retry missing or expired credentials without requesting authentication.
  • Do not execute external write actions from ambiguous requests or unverified targets.

Frequently Asked Questions

What credentials does this skill require?
It requires a Recoup API key or Recoup access token supplied through the supported environment variables.
Can it access artists outside my roster?
It can use research endpoints for any artist. Roster-specific resources require access through your Recoup account.
Which external services are supported?
The connector catalog can expose authorized Google Workspace, Gmail, TikTok, Instagram, and other available integrations.
Does it create missing analytics?
No. It reports retrieved values and identifies unavailable sources without estimates or placeholder metrics.
Can it send email?
Yes. It can use Recoup email delivery or an authorized Gmail connector after recipients and content are confirmed.
How does it handle API errors?
It reports authentication and access errors, checks endpoint documentation, and retries server errors once before stopping.

Developer Details

Author

recoupable

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/recoupable/skills/tree/00aa5c25a305b1056602bdf1dcf4c904073e6d55/skills/recoup-platform-api-access

Ref

a2c33069e7b4b3de94d72b4ff801c3cf921b187d

Maintenance freshness

8/11/2026

Usage

0 downloads · 0 views

File structure

📄 SKILL.md