x-article-publisher
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.run()inscripts/publish_article.pyto execute its own auxiliary Python scripts for parsing Markdown files and interacting with the system clipboard. These executions are limited to internal skill components. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied Markdown files and instructs the agent to analyze the content to generate article titles and image prompts. This creates a surface where embedded instructions in the Markdown could potentially influence the agent's actions.
- Ingestion points: Markdown files processed by
scripts/parse_markdown.py. - Boundary markers: None implemented for the text extraction process.
- Capability inventory: Subprocess execution, browser automation via Patchright/Playwright, and file system access for image resolution.
- Sanitization: Content is transformed into HTML for browser pasting but is not sanitized specifically for agent-facing prompts.
- [EXTERNAL_DOWNLOADS]: The documentation specifies the installation of third-party libraries including
Pillow,pyobjc-framework-Cocoa, andpatchrightto support image processing, macOS clipboard access, and browser automation. - [DYNAMIC_EXECUTION]: The automation scripts utilize
page.evaluate()to run JavaScript code within the browser context, which is necessary for interacting with the rich text editor of the target website.
Audit Metadata