x-twitter-scraper
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of arbitrary, user-generated content from X (Twitter) which may contain malicious instructions designed to influence or override the agent's behavior.
- Ingestion points: SKILL.md describes 22 different tools (such as
search-tweets,get-user-info, andreply_extractor) that bring external social media data into the agent's context. - Boundary markers: The documentation does not specify the use of boundary markers or instructions to delimit the retrieved content from the agent's system instructions.
- Capability inventory: The skill enables broad data extraction, account monitoring, and webhook registration. It does not describe capabilities for local file system modification or arbitrary shell command execution.
- Sanitization: No mention of sanitizing or filtering the content retrieved from X before it is processed by the agent.
Audit Metadata