x-research
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests raw tweet text and metadata from external X/Twitter accounts, which are untrusted sources. This data is used to generate research reports and content recommendations.
- Ingestion points: Tweet content is fetched from the Apify API via
scripts/fetch_tweets.pyand stored inraw.json. - Boundary markers: The workflow does not explicitly define delimiters or instructions for the agent to ignore potentially malicious instructions embedded within the fetched tweet text during report generation.
- Capability inventory: The skill possesses the ability to write files to the local file system (
report.md,outliers.json) and execute Python scripts via shell commands. - Sanitization: No sanitization or filtering of the tweet text is performed before it is presented to the agent for analysis.
- [EXTERNAL_DOWNLOADS]: The skill connects to Apify's well-known automation platform to fetch tweet data using the
apify-clientlibrary. - Evidence:
scripts/fetch_tweets.pyinvokes theapidojo/tweet-scraperActor on Apify to retrieve search results. This is a standard integration with a well-known technology service.
Audit Metadata