Is maddiedreese/substack-formatter safe?
https://github.com/openclaw/skills/tree/main/skills/maddiedreese/substack-formatter
90
SAFE
This is a legitimate text formatting tool for Substack publishing that performs exactly as advertised. The code is straightforward Python with clear functionality for converting text to HTML and copying to clipboard. The main security concern is minor subprocess usage with shell=True, but this appears to be safe in context.
Category Scores
Findings (1)
MEDIUM Subprocess shell execution -25 ▶
The copy_to_substack.py script uses subprocess.run() with shell=True for executing xclip commands. While the temp file path is system-generated and likely safe, this pattern could be vulnerable to injection if user input were directly included.