Security audit
Security checks for vulnerabilities and agentic risk
The posting workflow requires approval, but its recommended sign-in setup exposes authorization codes to a third-party website without explaining that privacy risk.
Before signing in, configure a Pinterest-supported callback you control, or explicitly accept that the recommended website can observe the authorization code and state. Review the separate socialkit-social-core dependency and retain approval for every post. The supplied code was fully read, but the external callback and separate dependency remain unverified. No intentional credential theft or destructive behavior was established.
Referenced artifact was not completely inspected
- Every Pin needs options.boardId; list boards with `node scripts/auth.mjs --platform pinterest --boards`.
Referenced artifact was not completely inspected
1. Sign in once: `node scripts/auth.mjs --platform pinterest --start`, give the user the `signInUrl`, then `node scripts/auth.mjs --platform pinterest --finish
Referenced artifact was not completely inspected
3. Write `post.json` (text, media with alt text, options). See `node scripts/publish.mjs --help`.
Referenced artifact was not completely inspected
4. Validate: `node scripts/publish.mjs --check --dir pin-<slug>`
Referenced artifact was not completely inspected
6. Publish: `node scripts/publish.mjs --publish --dir pin-<slug>` and report the result.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Sign in
`node scripts/auth.mjs --platform pinterest --start`, then `--finish --url "..."`.
Access tokens last 30 days and refresh automatically (continuous refresh).
List boards for `options.boardId`: `node scripts/auth.mjs --platform pinterest --boards`.
## Limits
Without declared permissions the skill's intent is opaque and cannot be validated.
The setup sends OAuth authorization codes and state to an author-controlled website rather than a callback controlled by the user bringing their own app. That website and its infrastructure can observe or log these sensitive parameters; the client secret limits direct code redemption, but does not eliminate the unnecessary disclosure or dependency on the website's integrity.
The OAuth scope list requests boards:write even though this skill only lists existing boards and creates Pins. This unnecessarily grants board-modification authority, increasing the damage possible if the token or agent is compromised; the local post-approval checkpoint does not restrict what a stolen token can do.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
return v;
}
function apiBase(env) {
return env[PIN_ENV.sandbox] === "1" ? "https://api-sandbox.pinterest.com/v5" : "https://api.pinterest.com/v5";
}
function basic(env) {
return {
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
async function finishPinterestLogin(pastedUrl, env = process.env, fetchImpl) {
const { code, redirectUri } = finishPasteback("pinterest", pastedUrl, env);
const res = await postForm(
"https://api.pinterest.com/v5/oauth/token",
{ grant_type: "authorization_code", code, redirect_uri: redirectUri, continuous_refresh: "true" },
basic(env),
fetchImpl
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"pinterest",
async (t) => toToken(
await postForm(
"https://api.pinterest.com/v5/oauth/token",
{ grant_type: "refresh_token", refresh_token: t.refreshToken },
basic(env)
),
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
return v;
}
function apiBase(env) {
return env[PIN_ENV.sandbox] === "1" ? "https://api-sandbox.pinterest.com/v5" : "https://api.pinterest.com/v5";
}
function basic(env) {
return {
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"pinterest",
async (t) => toToken(
await postForm(
"https://api.pinterest.com/v5/oauth/token",
{ grant_type: "refresh_token", refresh_token: t.refreshToken },
basic(env)
),
The CLI dispatches to X, TikTok, and LinkedIn sign-in flows, which obtain and persist credentials for those services. These are reachable capabilities, not merely unused bundled functions, and are unrelated to the manifest's Pinterest-only posting purpose.
L545-L553 define an authenticated capability to retrieve approximately 90 days of impressions, saves, Pin clicks, and outbound clicks for a supplied Pin ID. Reading engagement analytics is not necessary to create an approved Pin and is not declared in the manifest; although the publish runner does not invoke it, the capability is implemented in this file.