Is maddiedreese/substack-formatter safe?
Yes. maddiedreese/substack-formatter is safe to install. Oathe's behavioral security audit gave the substack-formatter skill by maddiedreese a trust score of 90/100 with 1 finding, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/maddiedreese/substack-formatter
Is maddiedreese/substack-formatter safe to install?
This is a legitimate text formatting tool for Substack publishing that performs exactly as advertised. The code is straightforward Python with clear functionality for converting text to HTML and copying to clipboard. The main security concern is minor subprocess usage with shell=True, but this appears to be safe in context.
What security issues were found in maddiedreese/substack-formatter?
Category Scores
Findings (1)
MEDIUM Subprocess shell execution -25 ▶
The copy_to_substack.py script uses subprocess.run() with shell=True for executing xclip commands. While the temp file path is system-generated and likely safe, this pattern could be vulnerable to injection if user input were directly included.
Should I install maddiedreese/substack-formatter?
Oathe's verdict for maddiedreese/substack-formatter is SAFE with a trust score of 90/100. Recommendation: Install.