The Agent Skills Directory

[COMMAND_EXECUTION]: The skill extensively uses local TypeScript scripts (e.g., x-browser.ts, x-article.ts) executed via the bun runtime. These scripts use child_process to run system utilities such as osascript on macOS, xdotool or ydotool on Linux, and powershell.exe on Windows to perform UI automation tasks like sending keystrokes (Cmd+V/Ctrl+V) and activating the browser application.\n- [DYNAMIC_EXECUTION]: Several utility scripts (copy-to-clipboard.ts, check-paste-permissions.ts) dynamically generate Swift source code for macOS, write it to temporary files, and execute it using the swift interpreter. This is done to handle complex clipboard operations for image and rich text data which are not natively supported by basic shell commands.\n- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves reading and processing user-provided Markdown files for long-form articles. This creates a vulnerability surface where malicious instructions embedded in the Markdown could potentially influence the agent's behavior during the composition or review phases. The instructions lack explicit boundary markers or directives for the agent to ignore instructions found within the data.\n
Ingestion points: Local Markdown files, image paths, and video paths provided by the user as arguments to the posting scripts.\n
Boundary markers: Absent; the agent is not instructed to use delimiters or specifically ignore instructions within the processed files.\n
Capability inventory: The skill has broad capabilities including file system access (read/write), network access (via browser automation), system clipboard control, and the ability to send raw keystrokes to the OS.\n
Sanitization: The Markdown is parsed into HTML, but the agent's interpretation of the original content is not explicitly constrained.\n- [PRIVILEGE_ESCALATION]: The skill requires "Accessibility" permissions on macOS to function correctly, as it relies on osascript to send keystrokes to the Chrome browser. The check-paste-permissions.ts script explicitly guides the user to grant these permissions if they are missing. While this is a legitimate requirement for UI automation, it represents an escalation of the agent's ability to control the user's environment.\n- [EXTERNAL_DOWNLOADS]: The md-to-html.ts script, through its dependency on the baoyu-md library, automatically fetches remote images referenced in the Markdown files and saves them to a local temporary directory for further processing. This is standard behavior for a Markdown processor but involves outgoing network requests based on user-provided content.

baoyu-post-to-x