x-article-publisher
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The main publishing script
scripts/publish_article.pyusessubprocess.run()to execute other Python scripts within the skill package, such asparse_markdown.pyandcopy_to_clipboard.py. These calls are constructed using argument lists, which is a secure way to execute internal commands without risk of shell injection.- [CREDENTIALS_SAFE]: The skill implements a persistent authentication mechanism for X (Twitter) by storing browser session data and cookies locally in thedata/browser_state/directory. The documentation and project structure include measures to ensure these sensitive session files are not included in version control.- [EXTERNAL_DOWNLOADS]: The skill instructions guide the user to install standard Python dependencies includingPillow,pyobjc-framework-Cocoa, andpatchright. These are established libraries required for the skill's functionality, such as image processing, clipboard interaction, and browser automation.
Audit Metadata