xr CLI
6/8 principles met
Fast, ergonomic CLI for the X (Twitter) API
$ anc audit xr --json
Eight principles, scored
Behavioral and source checks. Every non-pass row carries a copy-paste remediation prompt.
- P1Non-Interactive by Defaultpass
All 6 checks pass.
- P2Structured, Parseable Outputwarn
--output/--format flag detected but could not validate JSON via safe probes (--help/--version override output flags in most CLIs)
Remediation · P2Make xr satisfy P2 (Structured, Parseable Output) from the agent-native CLI standard. Address: - Structured output support (--output/--format flag detected but could not validate JSON via safe probes (--help/--version override output flags in most CLIs)) Requirements: https://anc.dev/p2
- P3Progressive Help Discoverypass
All 8 checks pass.
- P4Fail-Fast, Actionable Errorspass
All 3 checks pass.
- P5Safe Retries & Mutation Boundariespass
All 2 checks pass.
- P6Composable, Predictable Command Structurewarn
16/41 subcommand(s) follow standard verb names. Non-standard: post, quote, read, whoami, user, timeline, mentions, like, unlike, repost, unrepost, unbookmark, bookmarks, likes, following, followers, muted, blocked, usage, dm, dms, broadcasts, media, examples, validate. MAY-tier — community-standard verbs (get/list/create/update/delete) help agents predict subcommand behavior across CLIs. · subcommand naming is inconsistent: 2 non-verb subcommand(s) (auth, media) mix verb and non-verb children at the second level, so an agent cannot predict where the action lives. SHOULD-tier: pick a consistent shape (all verb-first, all noun-verb hierarchy, or any combination where each non-verb group's children are uniformly verbs). The verb list is a heuristic; inspect `--help` to confirm.
Remediation · P6Make xr satisfy P6 (Composable, Predictable Command Structure) from the agent-native CLI standard. Address: - Subcommand verbs follow community-standard names (16/41 subcommand(s) follow standard verb names. Non-standard: post, quote, read, whoami, user, timeline, mentions, like, unlike, repost, unrepost, unbookmark, bookmarks, likes, following, followers, muted, blocked, usage, dm, dms, broadcasts, media, examples, validate. MAY-tier — community-standard verbs (get/list/create/update/delete) help agents predict subcommand behavior across CLIs.) - Subcommand naming follows a consistent verb/noun convention (subcommand naming is inconsistent: 2 non-verb subcommand(s) (auth, media) mix verb and non-verb children at the second level, so an agent cannot predict where the action lives. SHOULD-tier: pick a consistent shape (all verb-first, all noun-verb hierarchy, or any combination where each non-verb group's children are uniformly verbs). The verb list is a heuristic; inspect `--help` to confirm.) Requirements: https://anc.dev/p6
- P7Bounded, High-Signal Responsespass
All 6 checks pass.
- P8Discoverable Through Agent Skill Bundlespass
All 3 checks pass.
All Audits
P1: Non-Interactive by Default
| PASS | Non-interactive by default | |
| SKIP | Non-interactive gate flag advertised in --help | target satisfies P1 via alternative gate (help-on-bare or stdin-primary) |
| PASS | Flags advertise env-var bindings in --help | |
| PASS | Secret-bearing flags expose stdin or *-file companion | |
| PASS | `--help` advertises default values for flags | |
| PASS | Rich-TUI affordance for TTY contexts |
P2: Structured, Parseable Output
| WARN | Structured output support | --output/--format flag detected but could not validate JSON via safe probes (--help/--version override output flags in most CLIs) |
| PASS | Structured-output CLI exposes its schema at runtime | |
| PASS | --json / --jsonl short aliases for --output | |
| PASS | `--raw` flag for pipe-safe unformatted output | |
| PASS | `--output` advertises additional formats beyond text/json | |
| PASS | Bad invocation exits with structured usage-error code (2) | |
| PASS | Errors emit JSON envelope with discriminant + type id + message roles under `--output json` | |
| SKIP | JSON success and error envelopes share their non-payload key set | success-mode probe (`--help --output json`) produced no parseable JSON; cannot compare envelope shapes. |
P3: Progressive Help Discovery
| PASS | Help flag produces useful output | |
| PASS | Version flag works (`--version` plus short alias) | |
| PASS | Version flag works (`--version` plus short alias) | |
| PASS | `examples` subcommand or `--examples` flag for curated usage patterns | |
| PASS | Short `-h` summary differs from `--help` long form | |
| PASS | Each subcommand's `--help` ships at least one invocation example | |
| PASS | Help text pairs human and `--output json` example invocations | |
| PASS | Command-list entries name the command without repeating the binary name |
P4: Fail-Fast, Actionable Errors
| PASS | Rejects invalid arguments | |
| PASS | Error messages include a hint or remediation phrase | |
| PASS | `--output json` produces JSON-formatted errors |
P5: Safe Retries & Mutation Boundaries
| PASS | Destructive subcommands require `--force` or `--yes` | |
| PASS | Read and write surfaces are both visible in subcommand list |
P6: Composable, Predictable Command Structure
| PASS | Handles SIGPIPE gracefully | |
| PASS | Pager-using CLI ships --no-pager escape hatch | |
| PASS | Respects NO_COLOR | |
| WARN | Subcommand verbs follow community-standard names | 16/41 subcommand(s) follow standard verb names. Non-standard: post, quote, read, whoami, user, timeline, mentions, like, unlike, repost, unrepost, unbookmark, bookmarks, likes, following, followers, muted, blocked, usage, dm, dms, broadcasts, media, examples, validate. MAY-tier — community-standard verbs (get/list/create/update/delete) help agents predict subcommand behavior across CLIs. |
| PASS | `--color` flag for explicit color control | |
| PASS | Input-accepting commands read from stdin when no file is given | |
| WARN | Subcommand naming follows a consistent verb/noun convention | subcommand naming is inconsistent: 2 non-verb subcommand(s) (auth, media) mix verb and non-verb children at the second level, so an agent cannot predict where the action lives. SHOULD-tier: pick a consistent shape (all verb-first, all noun-verb hierarchy, or any combination where each non-verb group's children are uniformly verbs). The verb list is a heuristic; inspect `--help` to confirm. |
| PASS | Operations are subcommands, not verb-shaped flags |
P7: Bounded, High-Signal Responses
| PASS | Quiet mode available | |
| PASS | `--verbose` flag for diagnostic escalation | |
| PASS | `--limit` / `--max-results` flag for list operations | |
| PASS | Cursor-based pagination flags for list traversal | |
| PASS | `--timeout` flag for long-running operations | |
| PASS | Help text advertises TTY-aware verbosity behavior |
P8: Discoverable Through Agent Skill Bundles
| PASS | Skill bundle has install path (`tool skill install [<host>]`) | |
| PASS | `skill install --all` for multi-runtime install | |
| PASS | `skill update` / `skill upgrade` for bundle refresh |
Reproduce this scorecard for xr locally and inspect the failing audits:
anc audit --command xr --output jsonInstall anc first if you don't have it. Add --output json to get the same JSON shape committed under scorecards/.