Skills basecamp-automation
📦

basecamp-automation

Content revision r2 High Risk ⚙️ External commands🌐 Network access

Automate Basecamp Projects with AI

Basecamp work becomes slow and error-prone when project identifiers, nested tools, and formats must be resolved manually. This skill guides authenticated Rube MCP workflows for projects, tasks, messages, groups, and access.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "basecamp-automation" from https://skillstore.io/skills/sickn33-basecamp-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-basecamp-automation/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "basecamp-automation". List active projects without changing anything.

Expected outcome:

  • Website Redesign - active - direct Basecamp link
  • Customer Onboarding - active - direct Basecamp link
  • No Basecamp records were changed.

Using "basecamp-automation". Prepare a launch checklist with three tasks for the Website Redesign project.

Expected outcome:

  • Target project: Website Redesign
  • Proposed list: Launch Checklist
  • Tasks: approve final copy; verify analytics; schedule release
  • Awaiting confirmation before creation.

Using "basecamp-automation". Prepare access changes that add Jordan and remove Taylor from Customer Onboarding.

Expected outcome:

  • Project: Customer Onboarding
  • Grant access: Jordan, matched to the visible Basecamp person
  • Revoke access: Taylor, matched to the current project member
  • No changes applied. Explicit confirmation is required.

Security Audit

High Risk
v7 • 8/14/2026 Open versioned report

The 115 shell-execution alerts are false positives caused by Markdown inline code, and six reconnaissance alerts describe normal Basecamp operations. The Rube MCP endpoint creates a low external trust risk. Access changes and broad message publication need explicit approval gates.

1
Files scanned
243
Lines analyzed
1
Review items
0
False positives ignored

Confirmed security concerns (2)

High
Missing Approval Gate for Access Changes
The workflow can create users and grant or revoke project access without requiring a preview or explicit confirmation. User creation also grants immediate access.
The documented tool sequence explicitly performs access changes, and the surrounding instructions contain no approval requirement before this privileged mutation.
Medium
Unconfirmed Message Publication and Notifications
The workflow publishes messages as active and says omitted subscriptions notify all project members. It does not require recipient review or confirmation.
The instructions specify immediate publication and broad default notifications, while no confirmation gate appears in the message workflow.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
The skill directs users to configure the third-party https://rube.app/mcp endpoint, creating a real network and trust boundary for Basecamp OAuth access.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-basecamp-automation/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-basecamp-automation/security.svg)](https://skillstore.io/skills/sickn33-basecamp-automation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-basecamp-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-basecamp-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-basecamp-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). basecamp-automation security audit report (audit version 7) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-basecamp-automation/audits/7

BibTeX citation

@techreport{sickn33-sickn33-basecamp-automation-2026, author = {sickn33}, title = {basecamp-automation security audit report (audit version 7)}, institution = {Skillstore}, year = {2026}, number = {7}, url = {https://skillstore.io/skills/sickn33-basecamp-automation/audits/7}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "basecamp-automation security audit report (audit version 7)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-08-14" url: "https://skillstore.io/skills/sickn33-basecamp-automation/audits/7" identifiers: - type: other value: "skillstore:sickn33-basecamp-automation:audit:7" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance

What You Can Build

Coordinate Project Tasks

Create structured to-do lists, assign tasks, set dates, and return direct Basecamp links.

Publish Team Updates

Prepare and post formatted message board updates after checking the target project and notification scope.

Manage Project Membership

Review project participants and prepare controlled access grants, revocations, or new user invitations.

Try These Prompts

List Active Projects
List my active Basecamp projects. Show each project name and direct link. Do not make any changes.
Create a To-Do List
In project [project name], prepare a to-do list named [list name]. Include these tasks: [tasks]. Preview the plan and wait for confirmation.
Publish a Project Update
Prepare a Basecamp message for [project name] with subject [subject] and content [content]. Show the recipient scope and wait before publishing.
Change Project Access
Review access for project [project name]. Prepare these changes: [changes]. Resolve identities, show exact effects, and require confirmation before applying anything.

Best Practices

  • Run tool discovery first because Rube MCP schemas can change.
  • Resolve project and nested identifiers from current Basecamp data before every write.
  • Preview destinations, content, recipients, and access effects before requesting confirmation.

Avoid

  • Do not guess project, list, board, or person identifiers.
  • Do not publish messages or change access from ambiguous instructions.
  • Do not send Markdown into fields that require Basecamp HTML.

Frequently Asked Questions

What connection does this skill require?
It requires Rube MCP and an active Basecamp OAuth connection with permissions for the requested operation.
Can it create and assign tasks?
Yes. It can create to-do lists and tasks with assignees, start dates, due dates, descriptions, and notification settings.
Can it manage project access?
Yes. It can prepare grants, revocations, and new users, but these privileged changes should require explicit confirmation.
What format should message content use?
Basecamp rich text fields require supported HTML. Markdown is not accepted for these fields.
How does it avoid duplicate to-do lists?
It can list existing to-do lists and compare names before creating a new list.
Does it handle large projects?
It supports paginated list workflows, but requests should be paced to respect Basecamp API rate limits.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

5a26d1d61d694db29af9b138c661c1981076d9df

Maintenance freshness

8/15/2026

Usage

6 downloads · 100 views

File structure

📄 SKILL.md

More from sickn33

View all
View all