publish-twitter-post
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The
scripts/setup.shscript downloads and executes a configuration script from the author's official GitHub repository (https://raw.githubusercontent.com/FinpeakInc/frevana-cli-releases/refs/heads/main/skills/frevana/scripts/setup.sh). This is used to maintain and update the local Frevana environment. - [EXTERNAL_DOWNLOADS]: The skill fetches the latest setup scripts from the developer's public repository to ensure the required CLI tools and daemon are correctly configured.
- [COMMAND_EXECUTION]: The
scripts/publish_twitter_post.shscript executes shell commands to perform health checks on a local daemon (localhost:12306) and invokes thefrevanabinary to publish content. - [DYNAMIC_EXECUTION]: Python is used via a heredoc to safely construct JSON payloads and format results, which prevents shell injection when handling user-provided text.
Audit Metadata