soia-pkm-publish-x-article
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/clipboard_x.pyexecutes system commands viasubprocess.runto manage the macOS clipboard and process images. - It uses
osascriptto put rich HTML and images on the clipboard, which is necessary for the agent to paste formatted content into the browser. - It uses
sips(a built-in macOS utility) to downsample images that exceed size limits before they are uploaded to X. - These commands are executed using a list of arguments rather than a shell string, which significantly reduces the risk of command injection. The usage is consistent with the skill's stated purpose of automating publication tasks on macOS.
Audit Metadata