twitter-api

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from Twitter/X, which is an untrusted external source controllable by third parties.
  • Ingestion points: Content is retrieved from social media via endpoints such as /api/search, /api/user/{id}/tweets, and /api/tweet/{id}/replies as documented in references/endpoints.md.
  • Boundary markers: The provided instructions do not include boundary markers or specific guidance to the agent on how to differentiate between fetched tweet content and system instructions.
  • Capability inventory: The skill is restricted to network read operations (GET requests) via the vendor's API; it does not include scripts for file writing, system modification, or code execution.
  • Sanitization: No sanitization or content validation procedures are described for the data returned by the API.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 08:26 PM
Security Audit — agent-trust-hub — twitter-api