技能 x-publish
📦
x-publish
內容修訂 r1 中風險 ⚙️ 外部命令📁 檔案系統存取🌐 網路存取
建立 X 貼文與串文草稿
手動發布由 AI 撰寫的串文可能耗時且容易出錯。此技能會開啟 X、貼上準備好的內容，並儲存草稿以供審閱。
支援: Claude Codex Code(CC)
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "x-publish" from https://skillstore.io/skills/kangarooking-x-publish.md and its manifest at https://skillstore.io/api/skills/kangarooking-x-publish/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「x-publish」。 將一則公告儲存為 X 草稿。
預期結果:
草稿已儲存。發布前請在 X 草稿中審閱。
正在使用「x-publish」。 將三段式產品串文儲存為草稿。
預期結果:
串文草稿已儲存，包含三則貼文。請在 X 草稿中審閱此串文。
正在使用「x-publish」。 在瀏覽器未登入時嘗試建立貼文草稿。
預期結果:
請先登入 X，然後再次執行草稿工作流程。
安全審計
中風險v6 • 2026/7/9 開啟版本化報告
Most Markdown backtick detections are false positives from documentation and examples, and the Linux subprocess calls use fixed command arrays without shell interpolation. Confirmed risks remain around local helper execution, temporary file staging, authenticated browser automation against X, and writing post text to the system clipboard.
2
已掃描檔案
413
分析行數
13
複核項目
0
已忽略的誤報
已確認的安全問題 (2)
中
Authenticated X Draft Creation
The skill uses browser automation in a logged-in X session to paste content and save drafts. It avoids auto-publish, but it still changes state in the user account.
The workflow explicitly requires a logged-in X session and includes compose, paste, close, and save-draft steps. The intent and account-side effect are clear.
中
scripts/copy_to_clipboard.py:22-29scripts/copy_to_clipboard.py:41-45scripts/copy_to_clipboard.py:67-90
System Clipboard Modification
The helper script writes user-provided post content to the operating system clipboard. Other local applications may read clipboard contents before the user replaces them.
The platform-specific implementations directly clear or write clipboard contents using AppKit, pyperclip, win32clipboard, xclip, or xsel.
能力複核項目 (13)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
中
Temp directory access
python copy_to_clipboard.py text --file /tmp/tweet.txt
The workflow documents staging tweet text in /tmp before copying it. Temporary files can expose draft content or leave it behind after the workflow finishes.
中
Ruby/shell backtick execution
```bash
This Markdown section instructs the agent to run local shell or Python helper commands during the draft workflow. The command use is bounded, but it is still an external command side effect.
中
Ruby/shell backtick execution
```bash
This Markdown section instructs the agent to run local shell or Python helper commands during the draft workflow. The command use is bounded, but it is still an external command side effect.
中
Ruby/shell backtick execution
```bash
This Markdown section instructs the agent to run local shell or Python helper commands during the draft workflow. The command use is bounded, but it is still an external command side effect.
中
Ruby/shell backtick execution
```bash
This Markdown section instructs the agent to run local shell or Python helper commands during the draft workflow. The command use is bounded, but it is still an external command side effect.
中
Ruby/shell backtick execution
```
This Markdown section instructs the agent to run local shell or Python helper commands during the draft workflow. The command use is bounded, but it is still an external command side effect.
中
Temp directory access
python scripts/copy_to_clipboard.py text --file /tmp/tweet.txt
The workflow documents staging tweet text in /tmp before copying it. Temporary files can expose draft content or leave it behind after the workflow finishes.
中
Temp directory access
echo "Tweet content" > /tmp/tweet.txt
The workflow documents staging tweet text in /tmp before copying it. Temporary files can expose draft content or leave it behind after the workflow finishes.
中
Temp directory access
python scripts/copy_to_clipboard.py text --file /tmp/tweet.txt
The workflow documents staging tweet text in /tmp before copying it. Temporary files can expose draft content or leave it behind after the workflow finishes.
低
Hardcoded URL
browser_navigate: https://x.com/compose/post
The skill directs browser automation to open the X compose page in an authenticated browser session. This is intended, but it is a real external network and account-state interaction.
低
Hardcoded URL
browser_navigate: https://x.com/compose/post
The skill directs browser automation to open the X compose page in an authenticated browser session. This is intended, but it is a real external network and account-state interaction.
低
Hardcoded URL
browser_navigate: https://x.com/compose/post
The skill directs browser automation to open the X compose page in an authenticated browser session. This is intended, but it is a real external network and account-state interaction.
低
Hardcoded URL
browser_navigate: https://x.com/compose/post
The skill directs browser automation to open the X compose page in an authenticated browser session. This is intended, but it is a real external network and account-state interaction.
風險因素
⚙️ 外部命令 (50)
scripts/copy_to_clipboard.py:74 scripts/copy_to_clipboard.py:85 SKILL.md:15 SKILL.md:16 SKILL.md:36-42 SKILL.md:42-49 SKILL.md:49-55 SKILL.md:55-58 SKILL.md:58-60 SKILL.md:60-63 SKILL.md:63-67 SKILL.md:67-70 SKILL.md:70-73 SKILL.md:73-76 SKILL.md:76-78 SKILL.md:78-84 SKILL.md:84-90 SKILL.md:90-93 SKILL.md:93-95 SKILL.md:95-98 SKILL.md:98-100 SKILL.md:100-101 SKILL.md:101-104 SKILL.md:104-108 SKILL.md:108-111 SKILL.md:111-114 SKILL.md:114-117 SKILL.md:117-120 SKILL.md:120-122 SKILL.md:122-127 SKILL.md:127-130 SKILL.md:130-133 SKILL.md:133-136 SKILL.md:136-139 SKILL.md:139-141 SKILL.md:141-159 SKILL.md:159-161 SKILL.md:161-164 SKILL.md:164-166 SKILL.md:166-179 SKILL.md:179-183 SKILL.md:183-185 SKILL.md:185-195 SKILL.md:195-198 SKILL.md:198-203 SKILL.md:203-205 SKILL.md:205-230 SKILL.md:230-235 SKILL.md:235-238 SKILL.md:238-241
📁 檔案系統存取 (4)
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/kangarooking-x-publish/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/kangarooking-x-publish?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/kangarooking-x-publish?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/kangarooking-x-publish/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/kangarooking-x-publish.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
kangarooking. (2026). x-publish security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/kangarooking-x-publish/audits/6BibTeX 引用
@techreport{kangarooking-kangarooking-x-publish-2026,
author = {kangarooking},
title = {x-publish security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/kangarooking-x-publish/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "x-publish security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "kangarooking"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/kangarooking-x-publish/audits/6"
identifiers:
- type: other
value: "skillstore:kangarooking-x-publish:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 高 45
架構
85
可維護性
85
內容
69
社群
83
規範符合度
你可以打造什麼
儲存發布公告
將一則簡短的產品更新暫存在 X 草稿中，以便發布前審閱。
準備活動串文
將準備好的活動文案轉換成相連的 X 串文草稿。
暫存技術筆記
將精簡的研究或工程筆記移到 X 草稿中，無需手動複製與貼上。
試試這些提示
儲存短草稿
使用 x-publish 將此內容儲存為 X 草稿：[post text]。不要發布。
儲存串文草稿
使用 x-publish 將此串文儲存為 X 草稿。每則貼文保持在 280 個字元以內：[thread text]。
審閱後建立草稿
檢查此貼文的長度與明顯格式問題，然後使用 x-publish 將其儲存為 X 草稿：[post text]。
暫存活動文案
使用 x-publish 將這些已核准的活動貼文暫存為 X 串文草稿。保留順序並回報草稿位置：[numbered posts]。
最佳實務
- 手動發布前，請在 X 中審閱每一份草稿。
- 避免在剪貼簿式工作流程中放入敏感或受禁運資訊。
- 儲存草稿前，確認每則貼文皆在 X 字元限制內。
避免
- 不要使用此技能自動發布或略過最終人工審閱。
- 不要在貼文文字中放入秘密、權杖或私人客戶資料。
- 當 X 撰寫元素已變更時，不要依賴此工作流程。
常見問題
此技能會自動發布貼文嗎？
不會。它會將內容儲存為 X 草稿，並預期使用者手動發布。
它支援串文嗎？
支援。當內容被拆分成多則貼文時，它可以將多則貼文加入串文草稿。
需要哪些瀏覽器存取權？
它需要瀏覽器自動化存取權，以及使用者已登入的 X 工作階段。
為什麼它會使用剪貼簿？
輔助指令碼會複製準備好的文字，讓瀏覽器自動化能將其貼到 X 撰寫框中。
它可以上傳媒體嗎？
不能。文件化的工作流程只處理文字貼文與文字串文。
它可以驗證內容政策或法律風險嗎？
不能。使用者必須自行審閱草稿，以符合準確性、政策、法律與品牌要求。
開發者詳細資訊
作者
kangarooking授權
MIT
Skillstore 修訂
r1
版本提示
作者未聲明版本。
引用
0519034dad657fb1f7706e0550e962beeda73fdf
維護新鮮度
2026/7/18
使用量
5 次下載 · 134 次瀏覽
檔案結構