zsxq-smart-publish
Warn
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/publish_article.pyutilizesos.system()to execute shell commands for software installation and environment setup. - [EXTERNAL_DOWNLOADS]: The skill performs runtime downloads of external software. Specifically,
scripts/publish_article.pychecks for theplaywrightlibrary and, if absent, installs it and the Chromium browser usingpipand theplaywrightCLI. - [REMOTE_CODE_EXECUTION]: The dynamic installation of code and binaries at runtime via shell commands allows for the execution of external content that has not been statically verified, which represents a form of remote code execution.
Audit Metadata