x2c-publish
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Node.js script (
scripts/x2c-publish.js) that facilitates interaction with the X2C platform API through various subcommands for distribution and wallet operations. - [EXTERNAL_DOWNLOADS]: The skill performs network operations to
eumfmgwxwjyagsvqloac.supabase.co(a Supabase managed instance) ands3api.arkfs.co(storage infrastructure) to execute API requests and upload media files. - [DATA_EXFILTRATION]: The skill transmits user-provided video metadata and authentication tokens to the platform's backend services, which is necessary for its core functionality as an API client.
- [INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface by ingesting user-supplied titles, descriptions, and external API data into the agent's context. While it possesses file-reading and network capabilities, the instructions mandate clear step-by-step workflows to verify user intent and data integrity.
Audit Metadata