finding-designers-and-creatives-on-twitter
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references Apify actors 'apidojo/twitter-user-scraper' and 'apidojo/tweet-scraper'. These are functional components of the skill's primary purpose. Instructions neutrally describe fetching data from Apify's official services.
- [DATA_EXPOSURE]: The skill uses the
APIFY_TOKENenvironment variable for authentication. It correctly instructs users to set this in the environment or a.envfile, which is a standard and safe practice for secret management. No hardcoded secrets were detected. - [COMMAND_EXECUTION]: Provides example shell commands for running a local script
scripts/run_actor.jsand usingcurlto interact with the Apify REST API. These are benign and standard for interacting with an API-based service. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data (Twitter bios and tweets). It has a defined schema confusion surface where instructions could theoretically be embedded in a user's bio. However, the skill primarily uses this data for scoring and filtering (Step 3) rather than executing it as instructions, and the capabilities are limited to API data retrieval and output generation, which are low-risk.
Audit Metadata