twitter-automation
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and installation guides hosted on the inference-sh GitHub organization.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by processing external input for Twitter automation. 1. Ingestion points: The text and media_url fields in the belt app run CLI commands. 2. Boundary markers: None are present in the provided examples to delimit user input from instructions. 3. Capability inventory: The skill uses the belt tool to post tweets, send direct messages, and manage user follows. 4. Sanitization: No sanitization or input validation logic is described in the skill instructions.
Audit Metadata