twitter-media-downloader
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external binaries
gallery-dlandyt-dlpusing Python'ssubprocess.runwith list-based arguments. This approach is a security best practice that prevents shell injection attacks by ensuring that user-provided URLs or paths are not interpreted as shell commands. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading media from Twitter/X and relies on established open-source tools. It instructs users to install these dependencies through standard package managers (pip), which is a transparent and verifiable process.
- [SAFE]: No malicious patterns such as prompt injection, unauthorized data exfiltration, or obfuscated code were detected. The handling of sensitive data (browser cookies) is consistent with the skill's stated purpose of accessing authenticated content.
Audit Metadata