Skills
Navigate
skills/artwist-polyakov/polyakov-claude-skills/telegraph-publisher/Gen Agent Trust Hub

telegraph-publisher

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes system commands such as curl to interact with the Telegraph and GitHub APIs, and python3 for content conversion and data processing logic.
  • [EXTERNAL_DOWNLOADS]: Fetches data from well-known services, including the Telegraph API, GitHub API (for media storage), and public diagram rendering servers (PlantUML and Mermaid).
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill ingests user-provided HTML content through the --html and --html-file arguments in create_page.sh and edit_page.sh scripts.
  • Boundary markers: The skill treats input as raw content to be published, but it does not execute this content locally.
  • Capability inventory: The skill has network access (Telegraph/GitHub APIs) and file system access (writing temporary files and manifests).
  • Sanitization: The skill uses a dedicated Python script (content_converter.py) that implements a strict whitelist-based parser to strip unsafe HTML tags and attributes, ensuring that only supported Telegraph Node elements are produced.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:19 PM