twitter-media-downloader

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes external binaries gallery-dl and yt-dlp using Python's subprocess.run with list-based arguments. This approach is a security best practice that prevents shell injection attacks by ensuring that user-provided URLs or paths are not interpreted as shell commands.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates downloading media from Twitter/X and relies on established open-source tools. It instructs users to install these dependencies through standard package managers (pip), which is a transparent and verifiable process.
  • [SAFE]: No malicious patterns such as prompt injection, unauthorized data exfiltration, or obfuscated code were detected. The handling of sensitive data (browser cookies) is consistent with the skill's stated purpose of accessing authenticated content.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 02:02 AM