canghe-post-to-x
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation and troubleshooting scripts reference the installation of the Bun runtime from a well-known service (bun.sh). This is provided as guidance to the user and is not executed automatically.
- [DYNAMIC_EXECUTION]: To support rich clipboard operations on macOS, the skill generates and executes temporary Swift scripts based on internal static templates to interact with AppKit APIs.
- [COMMAND_EXECUTION]: The skill uses platform-specific CLI tools to automate the user interface, including osascript on macOS, powershell.exe on Windows, and xdotool/ydotool on Linux for sending paste keystrokes.
- [EXTERNAL_DOWNLOADS]: The Markdown processing utility includes functionality to fetch remote images via HTTP/HTTPS to facilitate their inclusion in published articles.
Audit Metadata