Skills baoyu-post-to-x
📦
baoyu-post-to-x
Content revision r1 Critical ⚙️ External commands📁 Filesystem access🌐 Network access⚡ Contains scripts🔑 Env variables
Publish Posts and Articles to X
Posting rich content to X can require repetitive browser steps and format conversion. This skill automates drafts, images, and Markdown articles through Chrome while keeping preview mode as the default.
Supports: Claude Codex Code(CC)
Do not auto-install this skill.
The canonical policy requires operator review before any installation action.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "baoyu-post-to-x" from https://skillstore.io/skills/jimliu-baoyu-post-to-x.md and its manifest at https://skillstore.io/api/skills/jimliu-baoyu-post-to-x/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "baoyu-post-to-x". Draft a short launch post with one screenshot.
Expected outcome:
The skill opens Chrome, fills the X composer, attaches the screenshot, and leaves the post in preview mode.
Using "baoyu-post-to-x". Create an X Article from a Markdown file.
Expected outcome:
The skill converts the Markdown, opens the X Articles editor, inserts the title, content, and images, then leaves a draft for review.
Using "baoyu-post-to-x". Publish a prepared post after confirmation.
Expected outcome:
The skill uses the submit option to click the post or publish button after the user explicitly requests publishing.
Security Audit
Criticalv5 • 7/9/2026 Open versioned report
The skill is a real X publishing automation tool, but it has substantial security-sensitive behavior: child processes, Chrome DevTools control of a logged-in browser, clipboard writes, and OS-level paste keystrokes. Many static findings are formatting false positives, but the confirmed behavior warrants strong warnings and review before installation.
9
Files scanned
2,790
Lines analyzed
49
Review items
0
False positives ignored
Confirmed security concerns (14)
Critical
Keylogger keywords
4. **Paste images using osascript** (macOS): Sends real Cmd+V keystroke to Chrome, bypassing CDP's s
The documentation instructs OS-level paste keystrokes and describes bypassing synthetic-event limits. This is an intentional automation behavior with user-session impact.
Critical
Keylogger keywords
3. Send real Cmd+V keystroke via `osascript` and System Events
The documentation instructs OS-level paste keystrokes and describes bypassing synthetic-event limits. This is an intentional automation behavior with user-session impact.
Critical
Keylogger keywords
console.log(`Send real paste keystroke (Cmd+V / Ctrl+V) to the frontmost application
The script sends real paste keystrokes through osascript, xdotool, ydotool, or PowerShell. Even though it only pastes clipboard content, it controls the active desktop session.
Critical
Keylogger keywords
// Build script that activates app (if specified) and sends keystroke in one atomic operation
The script sends real paste keystrokes through osascript, xdotool, ydotool, or PowerShell. Even though it only pastes clipboard content, it controls the active desktop session.
Critical
Keylogger keywords
keystroke "v" using command down
The script sends real paste keystrokes through osascript, xdotool, ydotool, or PowerShell. Even though it only pastes clipboard content, it controls the active desktop session.
Critical
Keylogger keywords
keystroke "v" using command down
The script sends real paste keystrokes through osascript, xdotool, ydotool, or PowerShell. Even though it only pastes clipboard content, it controls the active desktop session.
Critical
Keylogger keywords
console.log(`[paste] Sending paste keystroke (retries=${retries}, delay=${delayMs}ms)...`);
The script sends real paste keystrokes through osascript, xdotool, ydotool, or PowerShell. Even though it only pastes clipboard content, it controls the active desktop session.
Critical
Keylogger keywords
console.log('[paste] Paste keystroke sent successfully');
The script sends real paste keystrokes through osascript, xdotool, ydotool, or PowerShell. Even though it only pastes clipboard content, it controls the active desktop session.
Show all 14 confirmed findings
Critical
Keylogger keywords
console.error('[paste] Failed to send paste keystroke');
The script sends real paste keystrokes through osascript, xdotool, ydotool, or PowerShell. Even though it only pastes clipboard content, it controls the active desktop session.
Critical
Keylogger keywords
// Paste image using paste script (activates Chrome, sends real keystroke)
The article workflow intentionally uses a helper that activates Chrome and sends a real paste keystroke. This is sensitive OS input automation.
Critical
Keylogger keywords
| `scripts/paste-from-clipboard.ts` | Send real paste keystroke |
The skill manifest advertises sending real paste keystrokes. That is an intentional OS input automation capability and should be treated as sensitive.
Critical
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The skill combines external command execution, browser network automation, clipboard access, and persistent Chrome profile use. The combination is security-sensitive even though it aligns with the stated publishing purpose.
High
Intentional Anti-Automation Bypass
The skill states that it uses real Chrome and disables automation detection to bypass anti-bot checks while posting to X. This is not hidden, but it is intentional platform anti-automation bypass behavior.
The manifest explicitly says the skill bypasses anti-automation, and both browser scripts launch Chrome with AutomationControlled disabled.
High
scripts/paste-from-clipboard.ts:39-54scripts/paste-from-clipboard.ts:61-77scripts/paste-from-clipboard.ts:172-173
Unescaped AppleScript Application Name
The paste helper interpolates the target application name directly into AppleScript. A malicious app name argument could alter the generated script if a user runs the helper directly with untrusted input.
The CLI --app value is assigned to targetApp and interpolated inside quoted AppleScript strings without escaping.
Capability review items (49)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Node.js child_process module
import { spawn } from 'node:child_process';
The script spawns platform clipboard utilities and PowerShell or Swift helpers to write image or HTML data to the system clipboard. This is intended behavior but affects user clipboard state.
High
Process spawn
const child = spawn(command, args, { stdio: ['pipe', 'pipe', 'pipe'] });
The script spawns platform clipboard utilities and PowerShell or Swift helpers to write image or HTML data to the system clipboard. This is intended behavior but affects user clipboard state.
High
Process spawn
const child = spawn(command, args, { stdio: ['pipe', 'pipe', 'pipe'] });
The script spawns platform clipboard utilities and PowerShell or Swift helpers to write image or HTML data to the system clipboard. This is intended behavior but affects user clipboard state.
High
PowerShell invocation
await runCommand('powershell.exe', ['-NoProfile', '-Sta', '-Command', ps, '-Path', imagePath]);
The script spawns platform clipboard utilities and PowerShell or Swift helpers to write image or HTML data to the system clipboard. This is intended behavior but affects user clipboard state.
High
PowerShell invocation
await runCommand('powershell.exe', ['-NoProfile', '-Sta', '-Command', ps, '-Path', htmlFilePath]);
The script spawns platform clipboard utilities and PowerShell or Swift helpers to write image or HTML data to the system clipboard. This is intended behavior but affects user clipboard state.
High
Node.js child_process module
import { spawnSync } from 'node:child_process';
The script invokes OS automation tools synchronously to paste into the foreground application. This is a real external-command capability with desktop-session impact.
High
Synchronous spawn
const result = spawnSync('osascript', ['-e', script], { stdio: 'pipe' });
The script invokes OS automation tools synchronously to paste into the foreground application. This is a real external-command capability with desktop-session impact.
High
Synchronous spawn
const result = spawnSync('osascript', ['-e', script], { stdio: 'pipe' });
The script invokes OS automation tools synchronously to paste into the foreground application. This is a real external-command capability with desktop-session impact.
High
Synchronous spawn
const which = spawnSync('which', [tool.cmd], { stdio: 'pipe' });
The script invokes OS automation tools synchronously to paste into the foreground application. This is a real external-command capability with desktop-session impact.
High
Synchronous spawn
const result = spawnSync(tool.cmd, tool.args, { stdio: 'pipe' });
The script invokes OS automation tools synchronously to paste into the foreground application. This is a real external-command capability with desktop-session impact.
High
Synchronous spawn
const result = spawnSync('powershell.exe', ['-NoProfile', '-Command', ps], { stdio: 'pipe' });
The script invokes OS automation tools synchronously to paste into the foreground application. This is a real external-command capability with desktop-session impact.
High
PowerShell invocation
const result = spawnSync('powershell.exe', ['-NoProfile', '-Command', ps], { stdio: 'pipe' });
The script invokes OS automation tools synchronously to paste into the foreground application. This is a real external-command capability with desktop-session impact.
High
Node.js child_process module
import { spawn, spawnSync } from 'node:child_process';
The article publisher launches Chrome and invokes helper scripts through child processes. This is core functionality but gives the skill external command execution capability.
High
Process spawn
const chrome = spawn(chromePath, [
The article publisher launches Chrome and invokes helper scripts through child processes. This is core functionality but gives the skill external command execution capability.
High
Synchronous spawn
const result = spawnSync('npx', ['-y', 'bun', copyScript, 'image', imagePath], { stdio: 'inherit' })
The article publisher launches Chrome and invokes helper scripts through child processes. This is core functionality but gives the skill external command execution capability.
High
Synchronous spawn
const result = spawnSync('npx', ['-y', 'bun', copyScript, 'html', '--file', htmlPath], { stdio: 'inh
The article publisher launches Chrome and invokes helper scripts through child processes. This is core functionality but gives the skill external command execution capability.
High
Synchronous spawn
const result = spawnSync(args[0]!, args.slice(1), { stdio: 'inherit' });
The article publisher launches Chrome and invokes helper scripts through child processes. This is core functionality but gives the skill external command execution capability.
High
Node.js child_process module
import { spawn, spawnSync } from 'node:child_process';
The script launches Chrome and invokes helper scripts through child processes. This is core functionality but gives the skill external command execution capability.
High
Process spawn
const chrome = spawn(chromePath, [
The script launches Chrome and invokes helper scripts through child processes. This is core functionality but gives the skill external command execution capability.
High
Synchronous spawn
const result = spawnSync('npx', ['-y', 'bun', copyScript, 'image', imagePath], { stdio: 'inherit' })
The script launches Chrome and invokes helper scripts through child processes. This is core functionality but gives the skill external command execution capability.
High
Synchronous spawn
const result = spawnSync(args[0]!, args.slice(1), { stdio: 'inherit' });
The script launches Chrome and invokes helper scripts through child processes. This is core functionality but gives the skill external command execution capability.
Medium
File stream creation
fs.createReadStream(filePath).on('error', reject).pipe(child.stdin);
The script reads user-supplied image or HTML files and creates temporary helper files for clipboard conversion. This is expected, but it is real local filesystem access.
Medium
Temp directory access
const tempDir = await mkdtemp(path.join(os.tmpdir(), prefix));
The script reads user-supplied image or HTML files and creates temporary helper files for clipboard conversion. This is expected, but it is real local filesystem access.
Medium
Node.js fs operations
fs.unlinkSync(destPath);
The converter reads Markdown files, writes downloaded images or HTML, and uses temporary image storage. This is expected functionality but still real filesystem access.
Medium
Node.js fs operations
fs.unlinkSync(destPath);
The converter reads Markdown files, writes downloaded images or HTML, and uses temporary image storage. This is expected functionality but still real filesystem access.
Medium
Node.js fs operations
fs.unlink(destPath, () => {});
The converter reads Markdown files, writes downloaded images or HTML, and uses temporary image storage. This is expected functionality but still real filesystem access.
Medium
Node.js fs operations
const content = fs.readFileSync(markdownPath, 'utf-8');
The converter reads Markdown files, writes downloaded images or HTML, and uses temporary image storage. This is expected functionality but still real filesystem access.
Medium
Synchronous file operations
const content = fs.readFileSync(markdownPath, 'utf-8');
The converter reads Markdown files, writes downloaded images or HTML, and uses temporary image storage. This is expected functionality but still real filesystem access.
Medium
File stream creation
const file = fs.createWriteStream(destPath);
The converter reads Markdown files, writes downloaded images or HTML, and uses temporary image storage. This is expected functionality but still real filesystem access.
Medium
Temp directory access
const tempDir = options?.tempDir ?? path.join(os.tmpdir(), 'x-article-images');
The converter reads Markdown files, writes downloaded images or HTML, and uses temporary image storage. This is expected functionality but still real filesystem access.
Medium
Temp directory access
npx -y bun md-to-html.ts article.md --html-only > /tmp/article.html
The converter reads Markdown files, writes downloaded images or HTML, and uses temporary image storage. This is expected functionality but still real filesystem access.
Medium
Temp directory access
npx -y bun md-to-html.ts article.md --save-html /tmp/article.html
The converter reads Markdown files, writes downloaded images or HTML, and uses temporary image storage. This is expected functionality but still real filesystem access.
Medium
WebSocket connection
const ws = new WebSocket(url);
The script connects to Chrome DevTools Protocol over WebSocket to control an authenticated browser session. This is intended but security-sensitive browser automation.
Medium
Node.js fs operations
const htmlContent = fs.readFileSync(htmlPath, 'utf-8');
The article script reads Markdown or generated HTML and checks image, Chrome, and profile paths. This is expected but genuine filesystem access.
Medium
Synchronous file operations
const htmlContent = fs.readFileSync(htmlPath, 'utf-8');
The article script reads Markdown or generated HTML and checks image, Chrome, and profile paths. This is expected but genuine filesystem access.
Medium
Temp directory access
const htmlPath = path.join(os.tmpdir(), 'x-article-content.html');
The article script reads Markdown or generated HTML and checks image, Chrome, and profile paths. This is expected but genuine filesystem access.
Medium
WebSocket connection
const ws = new WebSocket(url);
The script connects to Chrome DevTools Protocol over WebSocket to control a logged-in browser session. This is intended but security-sensitive browser automation.
Low
Node.js fs stat operations
if (!fs.existsSync(imagePath)) throw new Error(`File not found: ${imagePath}`);
The script reads user-supplied image or HTML files and creates temporary helper files for clipboard conversion. This is expected, but it is real local filesystem access.
Low
Node.js fs stat operations
if (!fs.existsSync(htmlFilePath)) throw new Error(`File not found: ${htmlFilePath}`);
The script reads user-supplied image or HTML files and creates temporary helper files for clipboard conversion. This is expected, but it is real local filesystem access.
Low
Temp file creation
import { mkdtemp, rm, writeFile } from 'node:fs/promises';
The script reads user-supplied image or HTML files and creates temporary helper files for clipboard conversion. This is expected, but it is real local filesystem access.
Low
Temp file creation
const tempDir = await mkdtemp(path.join(os.tmpdir(), prefix));
The script reads user-supplied image or HTML files and creates temporary helper files for clipboard conversion. This is expected, but it is real local filesystem access.
Low
Node.js fs stat operations
if (!fs.existsSync(localPath)) {
The converter checks local file existence for Markdown and downloaded image paths. This is low-risk but genuine filesystem access.
Low
Node.js fs stat operations
if (!fs.existsSync(markdownPath)) {
The converter checks local file existence for Markdown and downloaded image paths. This is low-risk but genuine filesystem access.
Low
Node.js fs stat operations
if (override && fs.existsSync(override)) return override;
The article script reads Markdown or generated HTML and checks image, Chrome, and profile paths. This is expected but genuine filesystem access.
Low
Node.js fs stat operations
for (const p of candidates) if (fs.existsSync(p)) return p;
The article script reads Markdown or generated HTML and checks image, Chrome, and profile paths. This is expected but genuine filesystem access.
Low
Node.js fs stat operations
if (!fs.existsSync(markdownPath)) {
The article script reads Markdown or generated HTML and checks image, Chrome, and profile paths. This is expected but genuine filesystem access.
Low
Node.js fs stat operations
if (override && fs.existsSync(override)) return override;
The script checks image paths and Chrome executable/profile paths on the local filesystem. This is expected but genuine filesystem access.
Low
Node.js fs stat operations
if (fs.existsSync(p)) return p;
The script checks image paths and Chrome executable/profile paths on the local filesystem. This is expected but genuine filesystem access.
Low
Node.js fs stat operations
if (!fs.existsSync(imagePath)) {
The script checks image paths and Chrome executable/profile paths on the local filesystem. This is expected but genuine filesystem access.
Risk Factors
⚙️ External commands (50)
evaluation.json:42 evaluation.json:51 evaluation.json:24 evaluation.json:63 evaluation.json:66 references/articles.md:52 references/articles.md:54 scripts/copy-to-clipboard.ts:1 scripts/copy-to-clipboard.ts:59 scripts/copy-to-clipboard.ts:96 scripts/copy-to-clipboard.ts:11-26 scripts/copy-to-clipboard.ts:79 scripts/copy-to-clipboard.ts:108 scripts/copy-to-clipboard.ts:129-186 scripts/copy-to-clipboard.ts:215 scripts/copy-to-clipboard.ts:227 scripts/copy-to-clipboard.ts:257 scripts/copy-to-clipboard.ts:260 scripts/copy-to-clipboard.ts:273 scripts/copy-to-clipboard.ts:279 scripts/copy-to-clipboard.ts:292 scripts/copy-to-clipboard.ts:327 scripts/copy-to-clipboard.ts:372 scripts/copy-to-clipboard.ts:377 scripts/copy-to-clipboard.ts:239 scripts/copy-to-clipboard.ts:249 scripts/md-to-html.ts:65 scripts/md-to-html.ts:98 scripts/md-to-html.ts:101 scripts/md-to-html.ts:134 scripts/md-to-html.ts:153 scripts/md-to-html.ts:162-166 scripts/md-to-html.ts:166-192 scripts/md-to-html.ts:192-202 scripts/md-to-html.ts:202-209 scripts/md-to-html.ts:209-246 scripts/md-to-html.ts:246-283 scripts/md-to-html.ts:283-295 scripts/md-to-html.ts:295-315 scripts/md-to-html.ts:315-323 scripts/md-to-html.ts:323-334 scripts/md-to-html.ts:334-353 scripts/md-to-html.ts:375-415 scripts/md-to-html.ts:415-423 scripts/md-to-html.ts:423-436 scripts/paste-from-clipboard.ts:1 scripts/paste-from-clipboard.ts:54 scripts/paste-from-clipboard.ts:77 scripts/paste-from-clipboard.ts:103 scripts/paste-from-clipboard.ts:107
📁 Filesystem access (31)
evaluation.json:102 references/articles.md:85 references/articles.md:96 references/articles.md:160 scripts/copy-to-clipboard.ts:260 scripts/copy-to-clipboard.ts:279 scripts/copy-to-clipboard.ts:115 scripts/copy-to-clipboard.ts:120 scripts/copy-to-clipboard.ts:3 scripts/copy-to-clipboard.ts:120 scripts/md-to-html.ts:56 scripts/md-to-html.ts:64 scripts/md-to-html.ts:78 scripts/md-to-html.ts:261 scripts/md-to-html.ts:100 scripts/md-to-html.ts:414 scripts/md-to-html.ts:261 scripts/md-to-html.ts:49 scripts/md-to-html.ts:238 scripts/md-to-html.ts:263 scripts/md-to-html.ts:373 scripts/md-to-html.ts:374 scripts/x-article.ts:373 scripts/x-article.ts:35 scripts/x-article.ts:57 scripts/x-article.ts:689 scripts/x-article.ts:373 scripts/x-article.ts:193 scripts/x-browser.ts:57 scripts/x-browser.ts:91 scripts/x-browser.ts:290
🌐 Network access (16)
references/articles.md:50 references/regular-posts.md:32 scripts/x-article.ts:67 scripts/x-article.ts:116 scripts/x-article.ts:19 scripts/x-article.ts:11 scripts/x-article.ts:76 scripts/x-article.ts:22 scripts/x-article.ts:76 scripts/x-browser.ts:102 scripts/x-browser.ts:165 scripts/x-browser.ts:37 scripts/x-browser.ts:9 scripts/x-browser.ts:113 scripts/x-browser.ts:40 scripts/x-browser.ts:113
⚡ Contains scripts (1)
Detected Patterns
Keylogger keywords×11[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
Audited by: claude View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/jimliu-baoyu-post-to-x/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/jimliu-baoyu-post-to-x?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/jimliu-baoyu-post-to-x?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/jimliu-baoyu-post-to-x/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/jimliu-baoyu-post-to-x.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
JimLiu. (2026). baoyu-post-to-x security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/jimliu-baoyu-post-to-x/audits/5BibTeX citation
@techreport{jimliu-jimliu-baoyu-post-to-x-2026,
author = {JimLiu},
title = {baoyu-post-to-x security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/jimliu-baoyu-post-to-x/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "baoyu-post-to-x security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "JimLiu"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/jimliu-baoyu-post-to-x/audits/5"
identifiers:
- type: other
value: "skillstore:jimliu-baoyu-post-to-x:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 64
Architecture
85
Maintainability
85
Content
74
Community
83
Spec Compliance
What You Can Build
Publish campaign posts
Prepare text and image posts for launch announcements or marketing updates with preview before posting.
Draft long-form articles
Convert Markdown drafts into X Articles and place cover or inline images into the editor.
Automate social publishing tests
Validate how content appears in a real Chrome session before manually approving publication.
Try These Prompts
Create a preview post
Use this skill to draft an X post in preview mode with this text: <your post text>.
Draft a post with images
Use this skill to compose an X post with this text and these image paths: <text>, <image paths>. Keep it in preview mode.
Prepare a Markdown article
Use this skill to create an X Article draft from <markdown file>. Use <cover image path> as the cover image.
Review then publish
Use this skill to draft the post from <content>. Show me the preview state first, then publish only after I confirm.
Best Practices
- Always run in preview or draft mode before using submit or publish options.
- Use a dedicated Chrome profile for X automation to limit account and session exposure.
- Keep image paths local and verify clipboard contents before publishing sensitive media.
Avoid
- Do not run the skill on a shared desktop session with unrelated applications in focus.
- Do not use it to bypass platform rules, spam limits, or consent requirements.
- Do not publish sensitive drafts without manual review in the browser.
Frequently Asked Questions
Does this skill post automatically?
Preview and draft modes are the default. Posting or publishing requires the submit option.
Does it require an X login?
Yes. The first run opens Chrome so the user can log in, and the profile can save the session.
Can it publish X Articles?
Yes. It can draft and publish Markdown-based X Articles, but X Articles may require X Premium.
Does it support images?
Yes. Regular posts support up to four images, and articles support cover and inline images.
Why does it use clipboard automation?
The scripts use the system clipboard and paste events because browser file and rich text workflows can reject synthetic events.
What should users review before installing?
Users should review the OS command, clipboard, browser automation, and anti-automation bypass behavior before use.
Developer Details
Author
JimLiuLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
1ffa7643651792ccb4bd3b15d924d2c97edff755
Maintenance freshness
7/18/2026
Usage
6 downloads · 465 views
File structure