x-twitter

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill reads data from external sources (X search results and user mentions) which could contain adversarial instructions designed to influence the agent's behavior.
  • Ingestion points: Found in SKILL.md within the 'Search' and 'Timelines & Mentions' command sections.
  • Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the retrieved tweet content.
  • Capability inventory: The skill is permitted to use Bash, Read, and Write tools as defined in the frontmatter.
  • Sanitization: No explicit sanitization or filtering of the retrieved tweet content is mentioned before it is processed by the agent.
  • [EXTERNAL_DOWNLOADS]: The skill recommends the installation of the xurl-cli utility via npm or Homebrew. These are well-known package managers and the tool is a standard dependency for the skill's primary purpose.
  • [COMMAND_EXECUTION]: The skill operates by generating and executing shell commands through the Bash tool to interact with the xurl CLI.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 02:13 AM