soia-media-publish-x-article
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/clipboard_x.pyexecutesosascriptandsipsviasubprocess.run. These commands are used solely for handling the system clipboard and image processing on macOS. - [EXTERNAL_DOWNLOADS]: The skill relies on
playwrightand the Chromium browser, which are downloaded and installed during setup as standard automation dependencies. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by ingesting untrusted Markdown data in
scripts/parse_x_article.py. However, the capabilities are limited to structural extraction and browser interaction without unsafe evaluation, and the parsing process includes basic sanitization by stripping Markdown markers from text snippets. - [SAFE]: The skill accesses a local browser profile in
~/.config/soia-skills/to maintain authentication. This access is limited to the application's specific data directory and is necessary for its primary function.
Audit Metadata