syndicate-article
Cross-posts articles to Dev.to and Farcaster, optimizing for engagement with compelling hooks and metadata.
Install this skill
or
33/100
Security score
The syndicate-article skill was audited on Jun 14, 2026 and we found 11 security issues across 2 threat categories, including 4 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 34
Template literal with variable interpolation in command context
SourceSKILL.md
| 34 | Log `SYNDICATE_SKIP: no syndication channels configured` to `memory/logs/${today}.md` and stop. Do NOT send any notification. |
high line 38
Template literal with variable interpolation in command context
SourceSKILL.md
| 38 | - If `${var}` is set, use `articles/${var}`. |
high line 136
Template literal with variable interpolation in command context
SourceSKILL.md
| 136 | d. Record in `memory/logs/${today}.md`: |
high line 163
Template literal with variable interpolation in command context
SourceSKILL.md
| 163 | d. Record in `memory/logs/${today}.md`: |
low line 11
External URL reference
SourceSKILL.md
| 11 | Cross-post Aeon articles to [Dev.to](https://dev.to) (developer audience) and [Farcaster](https://warpcast.com) (crypto-native audience) for organic discovery. Articles are published with a canonical |
low line 19
External URL reference
SourceSKILL.md
| 19 | - `DEVTO_API_KEY` — Dev.to API key. Generate at https://dev.to/settings/extensions (scroll to "DEV Community API Keys"). |
low line 20
External URL reference
SourceSKILL.md
| 20 | - `NEYNAR_API_KEY` + `NEYNAR_SIGNER_UUID` — Neynar credentials for Farcaster posting. Get an API key at [neynar.com](https://neynar.com) and create a managed signer to obtain the signer UUID. |
low line 67
External URL reference
SourceSKILL.md
| 67 | 2. Rewrite relative links/images: any `](/foo)` or `](foo.md)` → absolute `https://aaronjmars.github.io/aeon/foo` (strip `.md` where present). Preserve anchor fragments. |
low line 95
External URL reference
SourceSKILL.md
| 95 | https://aaronjmars.github.io/aeon/articles/YYYY/MM/DD/<slug>/ |
low line 134
External URL reference
SourceSKILL.md
| 134 | c. `scripts/postprocess-devto.sh` POSTs to `https://dev.to/api/articles` and records the URL on success. |
low line 161
External URL reference
SourceSKILL.md
| 161 | c. `scripts/postprocess-farcaster.sh` reads each payload, injects `NEYNAR_SIGNER_UUID` from env, POSTs to `https://api.neynar.com/v2/farcaster/cast` with `x-api-key: $NEYNAR_API_KEY`, removes on succe |
Scanned on Jun 14, 2026
View Security Dashboard