MCP server to publish to Substack, Ghost, Dev.to, WordPress, LinkedIn + 5 more from Claude Code.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http
verified
reported
listed in the official MCP registry counts 29 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
activate
-
analytics
-
bluesky_mentions
-
bluesky_post
-
bluesky_reply
-
bluesky_search
-
bluesky_thread
-
check_links
-
content_audit
-
cover_image
-
cross_publish
-
delete_draft
-
frontmatter
-
generate_social_posts
-
get_draft
-
index_now
-
linkedin_post
-
list_drafts
-
list_posts
-
mastodon_post
-
publish
-
repurpose
-
save_draft
-
seo_meta
-
seo_schema
-
seo_score
-
setup
-
status
-
x_post
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit e9173bc · analyzer v33 · 2w ago
danger signals1
- credential in logs credential in log MendleM-Pipepost-e9173bc/scripts/linkedin-auth.mjs :222
console.log(` access_token: ${tokenResponse.access_token}`);
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 91
filesystem 6
- fs (weak) MendleM-Pipepost-e9173bc/__tests__/config.test.ts :3
import * as fs from "node:fs"; - fs (weak) MendleM-Pipepost-e9173bc/__tests__/drafts/store.test.ts :2
import * as fs from "node:fs"; - fs (weak) MendleM-Pipepost-e9173bc/scripts/post-v0.9.0-bluesky-thread.mjs :5
import { readFile } from "node:fs/promises"; - fs (weak) MendleM-Pipepost-e9173bc/scripts/publish-v0.9.0-announcement.mjs :5
import { readFile } from "node:fs/promises"; - fs MendleM-Pipepost-e9173bc/src/config.ts :1
import * as fs from "node:fs"; - fs MendleM-Pipepost-e9173bc/src/drafts/store.ts :1
import * as fs from "node:fs";
shell / exec 1
- shell (weak) MendleM-Pipepost-e9173bc/scripts/linkedin-auth.mjs :26
import { spawn } from "node:child_process";
network 5
- net (weak) MendleM-Pipepost-e9173bc/scripts/linkedin-auth.mjs :23
import * as http from "node:http"; - net (weak) MendleM-Pipepost-e9173bc/scripts/post-v0.9.0-bluesky-thread.mjs :19
const sessionRes = await fetch(`${PDS}/xrpc/com.atproto.server.createSession`, { - net (weak) MendleM-Pipepost-e9173bc/scripts/publish-v0.9.0-announcement.mjs :18
const res = await fetch("https://dev.to/api/articles", { - net MendleM-Pipepost-e9173bc/src/audit/links.ts :72
let res = await fetch(url, { - net MendleM-Pipepost-e9173bc/src/http.ts :48
const res = await fetch(url, fetchOpts);
secrets 1
- secrets (weak) MendleM-Pipepost-e9173bc/scripts/linkedin-auth.mjs :53
let clientSecret = process.env.LINKEDIN_CLIENT_SECRET;
tool registrations 29
- seo_score MendleM-Pipepost-e9173bc/src/index.ts :106
- seo_meta MendleM-Pipepost-e9173bc/src/index.ts :112
- seo_schema MendleM-Pipepost-e9173bc/src/index.ts :118
- index_now MendleM-Pipepost-e9173bc/src/index.ts :124
- cover_image MendleM-Pipepost-e9173bc/src/index.ts :131
- publish MendleM-Pipepost-e9173bc/src/index.ts :138
- list_posts MendleM-Pipepost-e9173bc/src/index.ts :144
- cross_publish MendleM-Pipepost-e9173bc/src/index.ts :150
- frontmatter MendleM-Pipepost-e9173bc/src/index.ts :157
- generate_social_posts MendleM-Pipepost-e9173bc/src/index.ts :164
- repurpose MendleM-Pipepost-e9173bc/src/index.ts :171
- analytics MendleM-Pipepost-e9173bc/src/index.ts :178
- setup MendleM-Pipepost-e9173bc/src/index.ts :185
- activate MendleM-Pipepost-e9173bc/src/index.ts :191
- status MendleM-Pipepost-e9173bc/src/index.ts :197
- save_draft MendleM-Pipepost-e9173bc/src/index.ts :203
- list_drafts MendleM-Pipepost-e9173bc/src/index.ts :209
- get_draft MendleM-Pipepost-e9173bc/src/index.ts :215
- delete_draft MendleM-Pipepost-e9173bc/src/index.ts :221
- content_audit MendleM-Pipepost-e9173bc/src/index.ts :228
- check_links MendleM-Pipepost-e9173bc/src/index.ts :234
- bluesky_post MendleM-Pipepost-e9173bc/src/index.ts :241
- mastodon_post MendleM-Pipepost-e9173bc/src/index.ts :247
- linkedin_post MendleM-Pipepost-e9173bc/src/index.ts :253
- x_post MendleM-Pipepost-e9173bc/src/index.ts :259
- bluesky_mentions MendleM-Pipepost-e9173bc/src/index.ts :266
- bluesky_search MendleM-Pipepost-e9173bc/src/index.ts :272
- bluesky_thread MendleM-Pipepost-e9173bc/src/index.ts :278
- bluesky_reply MendleM-Pipepost-e9173bc/src/index.ts :284
install hooks 1
- prepublishOnly MendleM-Pipepost-e9173bc/package.json :23
pnpm run lint && pnpm run test && pnpm run build
declared dependencies 7
- @modelcontextprotocol/sdk@^1.12.0
- zod@^3.25.28
- @types/node@^25.6.0
- @vitest/coverage-v8@^3.2.4
- tsup@^8.0.0
- typescript@^5.5.0
- vitest@^3.2.4