Skills discord-automation
📦

discord-automation

Content revision r2 Medium Risk ⚙️ External commands🌐 Network access

Automate Discord Workflows with Rube MCP

Discord automation requires coordinated tool calls, permissions, and identifiers. This skill guides safe Rube MCP workflows for messages, roles, webhooks, and reactions.

Supports: Claude Codex Code(CC)
⚠️ 50 Poor

This skill is part of a pack

Install the whole pack to get every skill the task needs, in one command.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "discord-automation" from https://skillstore.io/skills/sickn33-discord-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-discord-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "discord-automation". Send a launch announcement to our community updates channel.

Expected outcome:

The assistant identifies the guild and channel, previews the announcement, confirms permissions, and sends the message after approval.

Using "discord-automation". Give three members the event volunteer role.

Expected outcome:

The assistant confirms the guild, member identifiers, target role, and hierarchy, then applies the assignments and reports the result.

Using "discord-automation". Create a webhook for deployment alerts.

Expected outcome:

The assistant confirms the target channel, creates the webhook with an approved name, sends a test alert, and protects the token.

Security Audit

Medium Risk
v5 • 7/23/2026 Open versioned report

The 50 command-execution alerts and 11 reconnaissance alerts are false positives caused by Markdown tool names and Discord reference rows. The external Rube MCP endpoint is a real low-severity network dependency, while authorized messaging and administration workflows create contextual medium-severity risks.

1
Files scanned
196
Lines analyzed
1
Review items
0
False positives ignored

Confirmed security concerns (3)

Medium
Privileged Discord Administration Actions
The skill guides role creation, assignment, deletion, member updates, webhook management, and reaction deletion. These actions can alter server access or content.
The cited workflows explicitly include destructive and access-changing actions with Discord permission requirements. Their impact depends on the connected bot authority.
Medium
Automated Messaging Abuse Potential
The skill supports channel messages, direct messages, and webhook messages with custom sender presentation. These features can send unwanted or misleading communications.
The cited sections explicitly document channel messages, direct messages, webhook execution, and custom webhook identity. Abuse remains constrained by Discord permissions.
Medium
Third-Party MCP Authorization Boundary
Users must add the Rube MCP endpoint and authorize Discord through a returned link. The service receives delegated access for the connected account or bot.
The setup explicitly requires an external MCP endpoint and Discord authorization, while the token section identifies bot-token and user-OAuth modes.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
The skill instructs users to connect to https://rube.app/mcp, creating a real external network and service trust boundary. The endpoint is intentional and clearly disclosed.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-discord-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-discord-automation/security.svg)](https://skillstore.io/skills/sickn33-discord-automation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-discord-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-discord-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-discord-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). discord-automation security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-discord-automation/audits/5

BibTeX citation

@techreport{sickn33-sickn33-discord-automation-2026, author = {sickn33}, title = {discord-automation security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-discord-automation/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "discord-automation security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-07-23" url: "https://skillstore.io/skills/sickn33-discord-automation/audits/5" identifiers: - type: other value: "skillstore:sickn33-discord-automation:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance

What You Can Build

Post Server Announcements

Prepare and send approved announcements to selected Discord channels with verified guild and channel identifiers.

Maintain Member Roles

Create, assign, remove, or inspect roles while checking hierarchy and permission limits before each action.

Connect External Alerts

Create and execute webhooks for approved integrations that publish operational updates into Discord channels.

Try These Prompts

Send a Channel Message
Send an approved message to a Discord channel. Search Rube MCP for current message tools first. Ask for missing guild or channel identifiers.
Create and Assign a Role
Create a Discord role and assign it to selected members. Confirm the guild, role name, permissions, member identifiers, and bot hierarchy before execution.
Set Up a Webhook Alert
Create a webhook for an approved alert channel. Search for current schemas, confirm the channel and webhook name, then prepare a test message.
Audit a Discord Workflow Plan
Plan a Discord workflow for messages, roles, and reactions. List each tool call, required identifier, permission check, confirmation point, and rollback option.

Best Practices

  • Search Rube MCP for current tool schemas before choosing a Discord or Discordbot tool.
  • Confirm guild, channel, user, role, message, and webhook identifiers before executing actions.
  • Preview outbound messages and require approval for direct messages, webhooks, role changes, and deletions.

Avoid

  • Do not send bulk direct messages or announcements without explicit recipient and content approval.
  • Do not use administrator permissions when a narrower Discord permission is sufficient.
  • Do not store or expose webhook tokens, authorization links, or Discord identifiers in shared outputs.

Frequently Asked Questions

Does this skill include executable code?
No. It is a documentation skill that guides Rube MCP tool selection and Discord workflow sequencing.
What must be connected before using it?
Rube MCP must be available, and Discord or Discordbot must have an active authorized connection.
Can it send messages automatically?
It can guide message sending through Discordbot tools, but users should approve recipients and content first.
Can it manage Discord roles?
Yes. It documents role creation, assignment, deletion, and member updates when the bot has permission.
How does it handle changing tool schemas?
It instructs the assistant to call RUBE_SEARCH_TOOLS first so current schemas are used.
What are the main safety concerns?
The main concerns are third-party authorization, privileged Discord actions, webhook tokens, and unwanted messages.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526

Maintenance freshness

7/26/2026

Usage

11 downloads · 99 views

File structure

📄 SKILL.md