twitter-thread-creation
Warn
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation encourages downloading installation resources from a remote GitHub repository (raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md) to set up the execution environment.
- [EXTERNAL_DOWNLOADS]: The skill instructions include the installation of a non-standard Node.js package (
belt-sh/cli) vianpxto enable its core functionality. - [COMMAND_EXECUTION]: The skill utilizes the
beltCLI to run remote applications for posting content to social media and generating images, which involves executing shell commands to interact with external services. - [INDIRECT_PROMPT_INJECTION]: The skill uses tools that ingest untrusted data from the internet, such as search results and web page content, which could be used to influence the agent's behavior.
- Ingestion points: Data fetched via
tavily/search-assistantandinfsh/agent-browser(SKILL.md). - Boundary markers: No specific delimiters or safety warnings are provided for the agent when processing this external content.
- Capability inventory: The agent has the ability to post content to Twitter/X via
x/post-createbased on the ingested information. - Sanitization: The skill does not explicitly show sanitization or validation of the text retrieved from external sources before it is used to generate social media posts.
Audit Metadata