yichen-social-bookmarks-exporter
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/export_x_links.pyinvokes theft(Field Theory) CLI tool usingsubprocess.run. The command structure is constrained to specific actions (list,--version) and uses programmatically defined arguments, which minimizes the risk of arbitrary command injection. - [REMOTE_CODE_EXECUTION]: The skill utilizes
tab.playwright.evaluatewithinscripts/chrome_collectors.mjsto execute scraping logic in the user's browser context. These scripts are part of the skill's own codebase and operate only on pages authorized by the user during the session. - [REMOTE_CODE_EXECUTION]: The agent is instructed to dynamically load the skill's own JavaScript modules using
import()from the skill's installation path. This is a standard mechanism for extending browser automation capabilities within this environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external websites and CLI tool outputs. It implements sanitization by validating all collected items against strict regular expression patterns before writing them to the filesystem, preventing the processing of malicious payloads as instructions.
- [EXTERNAL_DOWNLOADS]: The skill identifies the
afar1/fieldtheory-cliGitHub repository as an external dependency for X bookmark exports. The skill documents this requirement neutrally and does not automate the download or installation of this third-party tool.
Audit Metadata