x-article-publisher

SUSPICIOUS. The core behavior matches the stated purpose of drafting X Articles, and most tooling is proportionate, but trust is weakened by reliance on an unofficial third-party feishu2md CLI and by automation over a persistent logged-in X session. Data flows are mostly direct to X rather than an unknown proxy, so this is not strongly malicious, but it carries meaningful supply-chain and account-session risk.