Step by step
Use application passwords or dedicated bot tokens where supported. Enter secrets only in connection forms, not prompts, chat, screenshots or public code.
Check the active project and destination before scheduling. Give the integration only the permissions it needs. Rotate exposed credentials and update the connection.
Generated drafts still need editorial review. Verify facts, source rights and the content you choose to publish.