Security audit
Security checks across malware telemetry and agentic risk
This Hashnode publishing skill is mostly coherent, but it exposes under-disclosed account deletion and broader YouMind data/agent features, so it should be reviewed before install.
Install only if you are comfortable giving this skill a YouMind API key that can publish through your connected Hashnode account and may access YouMind knowledge data. Use draft mode first, require explicit approval for publishing or deleting, avoid running undocumented delete commands unless you intend permanent removal, and protect `~/.youmind/config.yaml` as a secret.
This skill is **self-contained and fully usable standalone.** The `youmind-article-dispatch` hub is an optional companion; it is NOT required for anything.
- **Primary mode — standalone:** Invoke directly ("Write a Hashnode article about X"). Works with zero other YouMind skills installed.
- **Author voice lookup:** This skill reads `~/.youmind/author-profile.yaml` (shared home directory — see `shared/YOUMIND_HOME.md`) for cross-platform voice preferences. Works whether or not dispatch is installed.
- **Optional dispatch-mode invocation:** When dispatch invokes this skill with a content brief containing `resolved_author`, the skill uses those fields as extra context. Without such a brief, the skill runs its own pipeline normally. Hashnode's depth-first DNA stays native to this skill.
- **Capability manifest (opt-in):** `dispatch-capabilities.yaml` is metadata that lets dispatch route intelligently. Deleting it reverts to defaults; it never breaks this skill.65/65 vendors flagged this skill as clean.
Detected: suspicious.exposed_secret_literal