twitter-automation
Pass
Audited by Gen Agent Trust Hub on May 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the 'belt' CLI and associated automation skills from the inference-sh GitHub organization and NPM registry.
- [COMMAND_EXECUTION]: The skill executes commands using the 'belt' CLI to perform actions such as logging in, posting tweets, and managing account engagement.
- [PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection by processing untrusted data for social media posts.
- Ingestion points: User-provided text and media URLs are passed as JSON input to the
belt app runcommands inSKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the command templates.
- Capability inventory: The skill utilizes the
beltCLI to perform network-based social media operations, including posting content and sending direct messages. - Sanitization: There is no evidence of input validation or sanitization before the data is processed by the automation tool.
Audit Metadata