yichen-x-article-draft-uploader
Warn
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The script
scripts/export_x_cookies_from_chrome.pyaccesses the Chrome profile's cookie database (~/Library/Application Support/Google/Chrome/Default/Cookies) to retrieve authentication secrets. - [COMMAND_EXECUTION]: The skill invokes the macOS
securitycommand-line utility viasubprocessto obtain the encryption password required to decrypt browser cookies. - [DATA_EXFILTRATION]: Authentication tokens are stored in a temporary JSON file at
/tmp/x_current_cookies.jsonduring the execution flow, which could be accessible by other local processes. - [COMMAND_EXECUTION]: The automation script executes internal Python scripts and the Playwright browser driver using
subprocess.runto perform Markdown parsing and web automation.
Audit Metadata