xr CLI

CuratedAudited 2026-10-05 by anc 0.6.0Markdown · JSON
96pass rate

6/8 principles met

Fast, ergonomic CLI for the X (Twitter) API

$ anc audit xr --json

notable Rust brettdavies/xurl-rs
MUST 19 / 28SHOULD 14 / 223 warningsaudited 2026-10-05 · anc 0.6.0

Eight principles, scored

Behavioral and source checks. Every non-pass row carries a copy-paste remediation prompt.

  1. P1
    Non-Interactive by Default

    All 6 checks pass.

    pass
  2. P2
    Structured, Parseable Output

    --output/--format flag detected but could not validate JSON via safe probes (--help/--version override output flags in most CLIs)

    Remediation · P2
    Make xr satisfy P2 (Structured, Parseable Output) from the agent-native CLI standard. Address:
    - Structured output support (--output/--format flag detected but could not validate JSON via safe probes (--help/--version override output flags in most CLIs))
    Requirements: https://anc.dev/p2
    warn
  3. P3
    Progressive Help Discovery

    All 8 checks pass.

    pass
  4. P4pass
  5. P5pass
  6. P6
    Composable, Predictable Command Structure

    16/41 subcommand(s) follow standard verb names. Non-standard: post, quote, read, whoami, user, timeline, mentions, like, unlike, repost, unrepost, unbookmark, bookmarks, likes, following, followers, muted, blocked, usage, dm, dms, broadcasts, media, examples, validate. MAY-tier — community-standard verbs (get/list/create/update/delete) help agents predict subcommand behavior across CLIs. · subcommand naming is inconsistent: 2 non-verb subcommand(s) (auth, media) mix verb and non-verb children at the second level, so an agent cannot predict where the action lives. SHOULD-tier: pick a consistent shape (all verb-first, all noun-verb hierarchy, or any combination where each non-verb group's children are uniformly verbs). The verb list is a heuristic; inspect `--help` to confirm.

    Remediation · P6
    Make xr satisfy P6 (Composable, Predictable Command Structure) from the agent-native CLI standard. Address:
    - Subcommand verbs follow community-standard names (16/41 subcommand(s) follow standard verb names. Non-standard: post, quote, read, whoami, user, timeline, mentions, like, unlike, repost, unrepost, unbookmark, bookmarks, likes, following, followers, muted, blocked, usage, dm, dms, broadcasts, media, examples, validate. MAY-tier — community-standard verbs (get/list/create/update/delete) help agents predict subcommand behavior across CLIs.)
    - Subcommand naming follows a consistent verb/noun convention (subcommand naming is inconsistent: 2 non-verb subcommand(s) (auth, media) mix verb and non-verb children at the second level, so an agent cannot predict where the action lives. SHOULD-tier: pick a consistent shape (all verb-first, all noun-verb hierarchy, or any combination where each non-verb group's children are uniformly verbs). The verb list is a heuristic; inspect `--help` to confirm.)
    Requirements: https://anc.dev/p6
    warn
  7. P7pass
  8. P8pass

All Audits

P1: Non-Interactive by Default

PASSNon-interactive by default
SKIPNon-interactive gate flag advertised in --helptarget satisfies P1 via alternative gate (help-on-bare or stdin-primary)
PASSFlags advertise env-var bindings in --help
PASSSecret-bearing flags expose stdin or *-file companion
PASS`--help` advertises default values for flags
PASSRich-TUI affordance for TTY contexts

P2: Structured, Parseable Output

WARNStructured output support--output/--format flag detected but could not validate JSON via safe probes (--help/--version override output flags in most CLIs)
PASSStructured-output CLI exposes its schema at runtime
PASS--json / --jsonl short aliases for --output
PASS`--raw` flag for pipe-safe unformatted output
PASS`--output` advertises additional formats beyond text/json
PASSBad invocation exits with structured usage-error code (2)
PASSErrors emit JSON envelope with discriminant + type id + message roles under `--output json`
SKIPJSON success and error envelopes share their non-payload key setsuccess-mode probe (`--help --output json`) produced no parseable JSON; cannot compare envelope shapes.

P3: Progressive Help Discovery

PASSHelp flag produces useful output
PASSVersion flag works (`--version` plus short alias)
PASSVersion flag works (`--version` plus short alias)
PASS`examples` subcommand or `--examples` flag for curated usage patterns
PASSShort `-h` summary differs from `--help` long form
PASSEach subcommand's `--help` ships at least one invocation example
PASSHelp text pairs human and `--output json` example invocations
PASSCommand-list entries name the command without repeating the binary name

P4: Fail-Fast, Actionable Errors

PASSRejects invalid arguments
PASSError messages include a hint or remediation phrase
PASS`--output json` produces JSON-formatted errors

P5: Safe Retries & Mutation Boundaries

PASSDestructive subcommands require `--force` or `--yes`
PASSRead and write surfaces are both visible in subcommand list

P6: Composable, Predictable Command Structure

PASSHandles SIGPIPE gracefully
PASSPager-using CLI ships --no-pager escape hatch
PASSRespects NO_COLOR
WARNSubcommand verbs follow community-standard names16/41 subcommand(s) follow standard verb names. Non-standard: post, quote, read, whoami, user, timeline, mentions, like, unlike, repost, unrepost, unbookmark, bookmarks, likes, following, followers, muted, blocked, usage, dm, dms, broadcasts, media, examples, validate. MAY-tier — community-standard verbs (get/list/create/update/delete) help agents predict subcommand behavior across CLIs.
PASS`--color` flag for explicit color control
PASSInput-accepting commands read from stdin when no file is given
WARNSubcommand naming follows a consistent verb/noun conventionsubcommand naming is inconsistent: 2 non-verb subcommand(s) (auth, media) mix verb and non-verb children at the second level, so an agent cannot predict where the action lives. SHOULD-tier: pick a consistent shape (all verb-first, all noun-verb hierarchy, or any combination where each non-verb group's children are uniformly verbs). The verb list is a heuristic; inspect `--help` to confirm.
PASSOperations are subcommands, not verb-shaped flags

P7: Bounded, High-Signal Responses

PASSQuiet mode available
PASS`--verbose` flag for diagnostic escalation
PASS`--limit` / `--max-results` flag for list operations
PASSCursor-based pagination flags for list traversal
PASS`--timeout` flag for long-running operations
PASSHelp text advertises TTY-aware verbosity behavior

P8: Discoverable Through Agent Skill Bundles

PASSSkill bundle has install path (`tool skill install [<host>]`)
PASS`skill install --all` for multi-runtime install
PASS`skill update` / `skill upgrade` for bundle refresh

Details

Version scored
4.2.1
Audit date
2026-10-05 18:44:48 UTC
Duration
527ms
Platform
linux/x86_64
Mode
command
Anc build
0.6.0
Install
brew install brettdavies/tap/xurl-rs

Embed the badge

This score (96%) clears the badge floor (70%). Copy this into your README:

[![agent-native](https://anc.dev/badge/xr.svg)](https://anc.dev/score/xr)

Preview: agent-native badge for xr

Reproduce this scorecard for xr locally and inspect the failing audits:

anc audit --command xr --output json

Install anc first if you don't have it. Add --output json to get the same JSON shape committed under scorecards/.