The Agent Skills Directory

[SAFE]: The skill performs network operations to official X (Twitter) API domains (api.x.com and upload.twitter.com). These are well-known services used for their intended functionality.
[PROMPT_INJECTION]: The skill fetches data from external X search results and user timelines, which presents a surface for indirect prompt injection from untrusted external content.
Ingestion points: requests.get calls in SKILL.md used for searching recent tweets and fetching user timelines.
Boundary markers: None are present in the provided code snippets to distinguish untrusted external content from agent instructions.
Capability inventory: The skill provides the ability to post content and media to X using oauth.post methods.
Sanitization: There is no evidence of filtering or escaping external data before it is returned to the agent context.

x-api