The Agent Skills Directory

[COMMAND_EXECUTION]: The authentication module (src/commands/auth.ts) utilizes the system shell via child_process.exec to open the default web browser for the OAuth2 device authorization flow. This is a standard implementation for CLI-based authentication and is confined to the specific purpose of opening the verification URL.
[CREDENTIALS_UNSAFE]: The skill manages session tokens by storing them in ~/.postiz/credentials.json. The analysis confirms that the tool follows security best practices by explicitly calling chmodSync to set restrictive permissions (mode 0600) on the credentials file, preventing access from other users on the system.
[DATA_EXFILTRATION]: The CLI tool communicates with official service endpoints at api.postiz.com and cli-auth.postiz.com. These network operations are necessary for the skill's primary function of scheduling social media content and do not involve unauthorized data movement.

postiz