Convert markdown text into optimized social media posts tailored for Twitter, LinkedIn, or Reddit formats with appropriate length and style.
Security Analysis
medium confidenceThe skill's code and instructions match its stated purpose (converting Markdown into social-post formats), request no credentials, and use only Python stdlib — no obvious incoherence or exfiltration behavior was found, but part of the script output in the prompt was truncated so review that tail if you want maximal assurance.
Name, SKILL.md, and the included Python script all describe converting markdown into Twitter/LinkedIn/Reddit formats. No unrelated binaries, services, or credentials are requested.
Runtime instructions tell the agent to run the included Python CLI on a supplied file or text. The visible code reads only the provided file or --text, parses and reformats it, and prepares platform-specific outputs. The file snippet in the prompt was truncated near CLI-handling output logic, so the very end of the script (likely handling writing files/JSON output) wasn't visible — this is the only area worth double-checking to ensure it doesn't perform unexpected filesystem or network actions.
No install spec — instruction-only with an included script. This is low-risk: nothing downloads or executes external installers. The SKILL.md claims Python 3.10+ stdlib only, which matches the script imports.
The skill requests no environment variables, no credentials, and the code does not reference os.environ or any secret/config paths in the visible portion.
always is false and autonomous invocation is allowed by default. The skill does not request persistent system privileges or to modify other skills/configs in the visible code.
Guidance
This skill appears coherent and limited to converting Markdown into social-post drafts using only Python stdlib. Before running it on sensitive data, quickly inspect the end of scripts/md2social.py (the CLI finalization/writing logic) to confirm it writes only to the --output directory or stdout and does not read other unrelated files or make network calls. Run first on non-sensitive sample files, or execute in a sandbox/container if you want stronger isolation. If you plan to enable autonomous invocation, remember the agent could run the script without manual confirmation — ensure that behavior is acceptable for your environment.
Latest Release
v1.0.0
Convert markdown articles to X threads, LinkedIn posts, Reddit posts.
More by @HugoSbl
Published by @HugoSbl on ClawHub
