baoyu-post-to-x
Warn
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill frequently executes system-level commands through
osascripton macOS,powershell.exeon Windows, and various utilities likexdotoolorydotoolon Linux to simulate user keystrokes and activate application windows. - [DATA_EXFILTRATION]: The skill uses the Chrome DevTools Protocol (
Network.getCookies) to programmatically extract sensitive session cookies, includingauth_tokenandct0, from the browser's memory to verify the user's X login status. - [REMOTE_CODE_EXECUTION]: The skill performs dynamic code generation and execution by writing Swift and PowerShell scripts to temporary files at runtime and then executing them with their respective system interpreters.
- [EXTERNAL_DOWNLOADS]: The automation logic depends on non-standard npm packages, such as
baoyu-chrome-cdpandbaoyu-md, which are maintained by the skill's vendor and provide low-level browser control and Markdown processing capabilities. - [PROMPT_INJECTION]: The instructions in
SKILL.mdadvise the agent to automatically terminate Chrome processes usingpkillwithout requesting user permission during troubleshooting, which bypasses standard autonomy and confirmation guardrails.
Audit Metadata