wjs-x-increasing-follower
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external CSV files placed in the
inbox/directory to track social media metrics. This external input could potentially be used as a vector for indirect prompt injection to influence the agent's analysis or recommendations. - Ingestion points:
scripts/ingest-csv.pyreads user-supplied CSV exports. - Boundary markers: No specific boundary markers or "ignore embedded instructions" warnings are used when processing the ingested metrics.
- Capability inventory: The skill is capable of executing shell commands and modifying X (Twitter) profile information through the
xurlutility. - Sanitization: The
ingest-csv.pyscript validates numeric inputs (e.g., visits, follows) but does not sanitize potential text payloads in headers or other non-numeric fields. - [COMMAND_EXECUTION]: The skill's operational logic involves executing multiple Python scripts and the
xurlCLI tool to perform data ingestion, experiment evaluation, and account management. - [DYNAMIC_EXECUTION]: The
scripts/scoreboard.pyscript usesimportlib.utilto dynamically load thescripts/evaluate.pymodule during execution. While this targets a local file, dynamic loading is a complex execution pattern that increases the surface area for logic manipulation.
Audit Metadata