Tistory API CLI

터미널에서 Tistory 블로그 글 읽기, 수정, 삭제, 카테고리 조회, 이미지 업로드를 지원하며 한국어 에러 메시지를 제공하는 비공식 CLI툴입니다.

This skill appears to be a legitimate CLI for Tistory, but there are two red flags: the source/homepage is unknown and the SKILL.md mentions environment variables (TISTORY_ACCESS_TOKEN, TISTORY_BLOG_NAME) that are not declared in the skill metadata. Before installing or granting secrets: 1) Locate and inspect the package source (PyPI project page or GitHub repo) and review the code that handles your access token. 2) Prefer installing in a sandbox or disposable environment (container or VM) and inspect network activity during first use. 3) Do not paste your TISTORY_ACCESS_TOKEN on public places; provide it only via secure environment-variable mechanisms. 4) Ask the publisher to update the skill metadata to declare required env vars/primary credential and provide a verifiable homepage/source. If you cannot verify the package/source, treat it as untrusted.

Type: OpenClaw Skill Name: tistory-api-cli Version: 0.1.1 The skill bundle contains metadata and documentation for a Tistory blog CLI tool. The documentation (SKILL.md) describes standard API operations such as reading, updating, and deleting posts, as well as image uploads, using legitimate environment variables (TISTORY_ACCESS_TOKEN). No executable code was provided, and the instructions do not contain any evidence of prompt injection, malicious redirection, or unauthorized data exfiltration.