publish-social
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill is a legitimate tool for social media automation that prioritizes user privacy and security.
- The skill implements extensive confirmation gates, including a single-confirm for drafts and a two-stage gate for live posts.
- Explicit anti-pattern documentation and automated greps prevent credential leakage and accidental publishing.- [COMMAND_EXECUTION]: The skill uses local Bun scripts for project maintenance and environment setup.
- File: scripts/bootstrap-experience.ts
- Behavior: Creates the directory structure and README for experience tracking with symlink protection.
- File: scripts/manifest-sync.ts
- Behavior: Indexes artifact frontmatter into a local manifest.json file using safe regex parsing.- [EXTERNAL_DOWNLOADS]: The skill connects to Typefully and major social media platform domains to perform its stated tasks.
- Target: api.typefully.com
- Target: linkedin.com, instagram.com, facebook.com, tiktok.com, youtube.com, bsky.app, threads.net, reddit.com
- Behavior: All network operations are directed at well-known, legitimate services for the purpose of creating drafts or publishing content.
Audit Metadata