x-research

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill handles sensitive X API credentials. It follows best practices by loading them from the OS environment or local .env files and explicitly warns against printing or committing secrets. The scripts/x_api.py script includes a safeguard that restricts all network operations to GET requests, preventing unauthorized account modifications (write actions).
  • [COMMAND_EXECUTION]: The skill executes local Python scripts to perform research. These scripts are invoked using uv, pipx, or python and do not use dangerous functions like eval() or exec() on external data. The commands are purpose-built for API interaction.
  • [PROMPT_INJECTION]: No evidence of malicious prompt injections, role-play bypasses, or instructions to ignore safety guidelines was found in the skill metadata or instructional content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 04:18 PM
Security Audit — agent-trust-hub — x-research