baoyu-post-to-x
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Documentation in SKILL.md and the diagnostic tool scripts/check-paste-permissions.ts suggest installing the Bun runtime using a remote script piped to bash (curl -fsSL https://bun.sh/install | bash). This targets the official installation domain for the Bun runtime.
- [EXTERNAL_DOWNLOADS]: The markdown conversion script scripts/md-to-html.ts automatically downloads remote images referenced in Markdown files to a local temporary directory to facilitate article composing.
- [COMMAND_EXECUTION]: The skill uses platform-specific subprocesses to manage system clipboards and send keystrokes to the browser, utilizing tools such as osascript on macOS, powershell.exe on Windows, and xclip or wl-copy on Linux.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied Markdown files which could contain instructions targeting the agent. \n
- Ingestion points: Local Markdown files provided to scripts/x-article.ts and scripts/md-to-html.ts via the markdownPath argument.\n
- Boundary markers: None identified; the script reads and parses the file content directly.\n
- Capability inventory: The skill can perform file operations, download remote content, and interact with the system clipboard and browser.\n
- Sanitization: Content is converted from Markdown to HTML but is not otherwise sanitized for agent-directed instructions.
Audit Metadata