x-twitter
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads data from external sources (X search results and user mentions) which could contain adversarial instructions designed to influence the agent's behavior.
- Ingestion points: Found in
SKILL.mdwithin the 'Search' and 'Timelines & Mentions' command sections. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the retrieved tweet content.
- Capability inventory: The skill is permitted to use
Bash,Read, andWritetools as defined in the frontmatter. - Sanitization: No explicit sanitization or filtering of the retrieved tweet content is mentioned before it is processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of the
xurl-cliutility vianpmorHomebrew. These are well-known package managers and the tool is a standard dependency for the skill's primary purpose. - [COMMAND_EXECUTION]: The skill operates by generating and executing shell commands through the
Bashtool to interact with thexurlCLI.
Audit Metadata