Install
$ agentstack add skill-posteyai-skills-postey-teams ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Postey Teams
Approval is a convention, not a state
Postey has no APPROVED status. PostStatusEnum is DRAFT | SCHEDULED | PUBLISHING | PUBLISHED. Nothing in the system records that a human said yes.
That has three consequences, and getting them wrong is how content goes out unreviewed:
| What is true | What it means for you | The failure it prevents | |---|---|---| | A draft carries no approval flag | Approval lives in an internal comment, a message, or a conversation. Read it; never infer it. | Treating a status as consent | | Silence is not approval | If asked whether something is cleared, say who said what and when — never "no objections were raised" | Reporting absence of dissent as sign-off | | Nothing stops a DRAFT publishing | The status does not protect it. Only the rule that publishing needs explicit instruction does, and that rule lives in the agent, not the server. | Assuming the server will catch you |
When the user says "it's approved", that is the approval. Take it from them, and say whose approval you are acting on.
Internal comments are the review record
postey://posts/{post_id}/comments/{platform} holds team notes — visible inside Postey, never published. They work on a post in any status, not just drafts.
Read them before drafting a revision. The most common failure in a review loop is rewriting a post while ignoring the note that says what was wrong with it.
Internal comments are not audience comments. Confusing the two means treating a colleague's note as public feedback — or worse, drafting a public reply to an internal note.
| | Internal comments | Audience comments | |---|---|---| | Who wrote it | A teammate or client, inside Postey | A real person on the live post | | Reach | Never published | Public | | Read via | postey://posts/{post_id}/comments/{platform} | get_platform_comments | | Owned by | This skill | postey-engagement | | A reply goes | Back into Postey | Out to the public |
Share links
resolve_share_link resolves a Postey share URL or share_id to the underlying post. Use it when someone pastes a link — the reviewer often has only that.
A share link is how a client who has no Postey account sees a draft. Two things follow: the recipient may not be in the team list, and anyone holding the link can read the draft. Do not put anything in a draft you would not send to whoever might be forwarded that link.
Teams
postey://teams and postey://teams/{team_id}/members say who exists and who can act. Read them before attributing a comment or asking "who should approve this?" — guessing a reviewer's name in front of a client is a small error with an outsized cost.
An account can belong to several teams, and identities can be shared across accounts (shares_identity_with in postey://accounts). Two account entries pointing at the same underlying identity will publish to the same place. Check before assuming two accounts mean two audiences.
The routine that works
- Read the accounts and confirm which one this content is for.
- Draft. Everything stays a
DRAFT. - Hand over the share link and say explicitly who needs to approve.
- When they respond, read the internal comments and the user's own words.
- Revise against what was actually said, and show the diff.
- Publish or schedule only on explicit instruction — and scheduling counts as publishing.
Step 6 does not become optional because step 3 happened. A reviewer approving a draft is not the user telling you to publish it.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: posteyai
- Source: posteyai/skills
- License: MIT
- Homepage: https://postey.ai
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.