syndicate-article
Cross-posts articles to Dev.to and Farcaster, optimizing for engagement with compelling hooks and metadata.
Install this skill
or
33/100
Security score
The syndicate-article skill was audited on May 30, 2026 and we found 11 security issues across 2 threat categories, including 4 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 33
Template literal with variable interpolation in command context
SourceSKILL.md
| 33 | Log `SYNDICATE_SKIP: no syndication channels configured` to `memory/logs/${today}.md` and stop. Do NOT send any notification. |
high line 37
Template literal with variable interpolation in command context
SourceSKILL.md
| 37 | - If `${var}` is set, use `articles/${var}`. |
high line 135
Template literal with variable interpolation in command context
SourceSKILL.md
| 135 | d. Record in `memory/logs/${today}.md`: |
high line 162
Template literal with variable interpolation in command context
SourceSKILL.md
| 162 | d. Record in `memory/logs/${today}.md`: |
low line 10
External URL reference
SourceSKILL.md
| 10 | Cross-post Aeon articles to [Dev.to](https://dev.to) (developer audience) and [Farcaster](https://warpcast.com) (crypto-native audience) for organic discovery. Articles are published with a canonical |
low line 18
External URL reference
SourceSKILL.md
| 18 | - `DEVTO_API_KEY` — Dev.to API key. Generate at https://dev.to/settings/extensions (scroll to "DEV Community API Keys"). |
low line 19
External URL reference
SourceSKILL.md
| 19 | - `NEYNAR_API_KEY` + `NEYNAR_SIGNER_UUID` — Neynar credentials for Farcaster posting. Get an API key at [neynar.com](https://neynar.com) and create a managed signer to obtain the signer UUID. |
low line 66
External URL reference
SourceSKILL.md
| 66 | 2. Rewrite relative links/images: any `](/foo)` or `](foo.md)` → absolute `https://aaronjmars.github.io/aeon/foo` (strip `.md` where present). Preserve anchor fragments. |
low line 94
External URL reference
SourceSKILL.md
| 94 | https://aaronjmars.github.io/aeon/articles/YYYY/MM/DD/<slug>/ |
low line 133
External URL reference
SourceSKILL.md
| 133 | c. `scripts/postprocess-devto.sh` POSTs to `https://dev.to/api/articles` and records the URL on success. |
low line 160
External URL reference
SourceSKILL.md
| 160 | c. `scripts/postprocess-farcaster.sh` reads each payload, injects `NEYNAR_SIGNER_UUID` from env, POSTs to `https://api.neynar.com/v2/farcaster/cast` with `x-api-key: $NEYNAR_API_KEY`, removes on succe |
Scanned on May 30, 2026
View Security Dashboard