Skills convertkit-automation
๐Ÿ“ฆ

convertkit-automation

Content revision r2 Medium Risk โš™๏ธ External commands๐ŸŒ Network access

Automate Kit Subscriber and Broadcast Workflows

Manual Kit administration makes subscriber and broadcast tasks slow and error-prone. This skill provides structured Rube MCP workflows with current schema discovery.

Supports: Claude Codex Code(CC)
โš ๏ธ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "convertkit-automation" from https://skillstore.io/skills/sickn33-convertkit-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-convertkit-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "convertkit-automation". Find subscriber dana@example.com.

Expected outcome:

One active subscriber matched dana@example.com. The response includes the subscriber identifier and last update date.

Using "convertkit-automation". Show statistics for the latest sent broadcast.

Expected outcome:

The latest sent broadcast is identified, followed by its available delivery and engagement metrics.

Using "convertkit-automation". Delete broadcast 1842.

Expected outcome:

Broadcast 1842 is displayed with its subject and status. Permanent deletion remains pending explicit confirmation.

Security Audit

Medium Risk
v5 โ€ข 7/23/2026 Open versioned report

The 51 shell-execution alerts and seven reconnaissance alerts are Markdown false positives. The external MCP endpoint is a real trust boundary, and the skill exposes irreversible unsubscribe and broadcast deletion workflows without mandatory confirmation.

1
Files scanned
205
Lines analyzed
1
Review items
0
False positives ignored

Confirmed security concerns (3)

Medium
Subscriber unsubscribe lacks a confirmation gate
The workflow permanently unsubscribes a subscriber after lookup without requiring explicit confirmation immediately before execution.
The documented sequence invokes KIT_DELETE_SUBSCRIBER and states the action affects all communications. No confirmation step appears in this workflow.
Medium
Broadcast deletion verification is optional
The workflow permits permanent broadcast deletion while marking identity verification as optional.
The workflow marks KIT_GET_BROADCAST as optional before KIT_DELETE_BROADCAST. The same section states deletion is permanent and cannot be undone.
Low
Subscriber data crosses a third-party trust boundary
The skill connects Rube MCP to Kit and queries subscribers by email, placing subscriber data within a third-party integration boundary.
The setup requires the Rube MCP endpoint and Kit authentication. The subscriber workflow explicitly supports exact email queries through that integration.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
The setup explicitly directs users to connect the hardcoded https://rube.app/mcp endpoint. This creates an external network and trust boundary for Kit operations.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-convertkit-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-convertkit-automation/security.svg)](https://skillstore.io/skills/sickn33-convertkit-automation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-convertkit-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-convertkit-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-convertkit-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

sickn33. (2026). convertkit-automation security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-convertkit-automation/audits/5

BibTeX citation

@techreport{sickn33-sickn33-convertkit-automation-2026, author = {sickn33}, title = {convertkit-automation security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-convertkit-automation/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "convertkit-automation security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-07-23" url: "https://skillstore.io/skills/sickn33-convertkit-automation/audits/5" identifiers: - type: other value: "skillstore:sickn33-convertkit-automation:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance

What You Can Build

Segment campaign subscribers

Find a subscriber by exact email and assign an existing Kit tag for targeted campaigns.

Review broadcast performance

List sent broadcasts and retrieve delivery, open, and engagement statistics for reporting.

Maintain audience records

Locate and unsubscribe a requested address while preserving a clear record of the selected subscriber.

Try These Prompts

Find one subscriber
Find the Kit subscriber with email [email]. Show the matched identifier and status without changing the account.
Tag a subscriber
Find [email], preview the match, then assign existing tag [tag ID] after I confirm.
Analyze recent broadcasts
List broadcasts from [date range], retrieve available statistics, and summarize performance from strongest to weakest.
Audit a paginated segment
Enumerate all [status] subscribers using cursors, track the total count, identify [criteria], and propose changes without applying them.

Best Practices

  • Search current tool schemas before every workflow because Rube MCP parameters can change.
  • Preview subscriber or broadcast details and request confirmation before destructive operations.
  • Use returned cursors unchanged and pace bulk requests to respect Kit rate limits.

Avoid

  • Do not guess subscriber, tag, or broadcast identifiers.
  • Do not delete broadcasts or unsubscribe recipients from ambiguous requests.
  • Do not treat include_total_count as a boolean when the current schema expects a string.

Frequently Asked Questions

Does this skill require a Kit API key?
It uses an authenticated Kit connection managed through Rube MCP instead of requesting a key directly.
Can it create new tags?
No. Create tags in the Kit web interface, then use their numeric identifiers for assignments.
Can it search part of an email address?
No. The documented subscriber email filter requires an exact address.
Can it restore an unsubscribed subscriber?
No restoration workflow is documented. Confirm the subscriber before using the permanent unsubscribe operation.
Can it report statistics for draft broadcasts?
No. Kit provides broadcast statistics only after a broadcast has been sent.
How does it process large result sets?
It follows cursor pagination, preserves returned cursor values, and recommends pacing requests around rate limits.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526

Maintenance freshness

7/26/2026

Usage

5 downloads ยท 89 views

File structure

๐Ÿ“„ SKILL.md

More from sickn33

View all
View all