Maintainer of this skill?
by trypostit
Open-source social media scheduler built for AI agents and the teams behind them. Create, schedule and publish posts to every network through MCP or the REST API, or write them yourself in a composer your team will love.
# Add to your Claude Code skills
git clone https://github.com/trypostit/trypostLast scanned: 10/15/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@humanfs/node: humanfs: Recursive copy follows symlinked files and copies data from outside the source tree",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@opentelemetry/core: OpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagation",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@opentelemetry/exporter-logs-otlp-http: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@opentelemetry/otlp-exporter-base: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@opentelemetry/otlp-transformer: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@opentelemetry/resources: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@opentelemetry/sdk-logs: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@opentelemetry/sdk-metrics: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@opentelemetry/sdk-trace-base: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tailwindcss/typography: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@vue/eslint-config-typescript: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@vue/server-renderer: @vue/server-renderer: XSS via missing CR in attribute-name blacklist",
"severity": "high"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups",
"severity": "high"
},
{
"type": "npm-audit",
"message": "braces: braces vulnerable to stack-exhaustion denial of service through deeply nested patterns",
"severity": "high"
},
{
"type": "npm-audit",
"message": "concurrently: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "dompurify: DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "engine.io-client: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "fast-glob: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "fflate: fflate unzipSync can enter an infinite loop when parsing malformed ZIP64 archives",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "js-yaml: JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",
"severity": "high"
},
{
"type": "npm-audit",
"message": "micromatch: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nanoid: nanoid: non-secure generators can loop indefinitely with negative size",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss-selector-parser: postcss-selector-parser allows denial of service through uncontrolled AST recursion",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "posthog-js: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "protobufjs: protobufjs: Denial of service through unbounded Any expansion during JSON conversion",
"severity": "high"
},
{
"type": "npm-audit",
"message": "shell-quote: shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "socket.io-parser: Socket.IO: Zero-attachment Memory Exhaustion",
"severity": "high"
},
{
"type": "npm-audit",
"message": "source-map-js: source-map-js allows event-loop denial of service through indexed source-map section offsets",
"severity": "high"
},
{
"type": "npm-audit",
"message": "vue: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ws: ws: Memory exhaustion DoS from tiny fragments and data chunks",
"severity": "high"
}
],
"status": "FAILED",
"scannedAt": "2026-10-15T08:53:54.088Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how trypost compares with popular alternatives.
trypost is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by trypostit. Open-source social media scheduler built for AI agents and the teams behind them. Create, schedule and publish posts to every network through MCP or the REST API, or write them yourself in a composer your team will love. It has 706 GitHub stars.
trypost failed SkillsLLM's automated security scan, which flagged one or more high-severity issues. Review the Security Report section carefully before using it.
Clone the repository with "git clone https://github.com/trypostit/trypost" and add it to your Claude Code skills directory (see the Installation section above).
trypost is primarily written in PHP. It is open-source under trypostit on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh trypost against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Most posts on TryPost are no longer written by hand. They come from AI agents and scripts. The rest come from teams who still want a great editor, a calendar and someone to approve before anything goes live. TryPost is built for both.
Connect Claude, ChatGPT, Cursor or any MCP client and ask in plain words:
"Write a week of posts about our spring tours for Instagram, LinkedIn and X, add them to each channel's queue and show me the Instagram insights for last month."
Every post is published natively through each network's official API. No reminders, no "finish in the mobile app".
TryPost is open source under AGPL-3.0. You can self-host it on your own servers and keep your posts, drafts and metrics on your infrastructure. The self-hosted version has every feature of TryPost Cloud: no paid tiers, no locked features.
If you would rather not run servers, TryPost Cloud is the same product, hosted and updated for you.
Hi, I'm Paulo, and I build TryPost in the open. Follow me for what is coming next to TryPost.
Short on time? A ⭐ is the best way to help. It puts TryPost in front of more people.
GNU Affero General Public License v3.0. Use, modify, fork, self-host and redistribute, including commercially. If you run a modified version as a network service, make your changes available to its users (AGPL §13).