Twitter/X Automation
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data from Twitter/X, such as mentions, DMs, and search results.
- Ingestion points: The skill utilizes
twitter_searchand triggers based on beingmentionedor receiving anew_followerto ingest data from the Twitter platform. - Boundary markers: There are no explicit instructions or delimiters defined to separate untrusted external content from the agent's core instructions.
- Capability inventory: The skill has the ability to post tweets (
twitter_post) and send direct messages (twitter_dm) via thesocial-mcpserver. - Sanitization: No specific sanitization or filtering logic is described for the content fetched from the platform before it is used to generate responses.
- [SAFE]: The JavaScript code snippets provided in the 'API Integration' section are documentation examples for tool usage and do not involve dynamic execution or remote code downloads.
- [SAFE]: No hardcoded credentials, sensitive file access, or unauthorized network exfiltration attempts were found. All network interactions are scoped to the intended Twitter/X API functionality.
Audit Metadata