zsxq-smart-publish

Warn

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/publish_article.py utilizes os.system() to execute shell commands for software installation and environment setup.
  • [EXTERNAL_DOWNLOADS]: The skill performs runtime downloads of external software. Specifically, scripts/publish_article.py checks for the playwright library and, if absent, installs it and the Chromium browser using pip and the playwright CLI.
  • [REMOTE_CODE_EXECUTION]: The dynamic installation of code and binaries at runtime via shell commands allows for the execution of external content that has not been statically verified, which represents a form of remote code execution.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 1, 2026, 10:11 AM
Security Audit — agent-trust-hub — zsxq-smart-publish