tracking-hiring-signals-from-company-tweets

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill facilitates the extraction and analysis of public hiring information from Twitter (X) using the 'apidojo/tweet-scraper' on the Apify platform. All external interactions are conducted through established, well-known services (Apify API).
  • [COMMAND_EXECUTION]: The skill provides examples of running a local script scripts/run_actor.js and using curl to interact with the Apify API. These are standard developer tools and used here for legitimate integration purposes.
  • [DATA_EXPOSURE]: The skill requires an APIFY_TOKEN environment variable. The instructions follow best practices by advising users to set this in the environment or a .env file rather than hardcoding it.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes untrusted data from social media tweets, the provided workflow involves specific extraction logic (extracting roles/teams) and scoring systems that treat the input as data rather than instructions, minimizing the surface for indirect prompt injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 07:19 PM
Security Audit — agent-trust-hub — tracking-hiring-signals-from-company-tweets