twitter-monitor
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONPERSISTENCECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the X/Twitter platform via a third-party API service.\n
- Ingestion points: The
fetch_tweetsfunction inscripts/twitter_monitor.pyretrieves tweet content from a remote API.\n - Boundary markers: The instructions do not define delimiters or specific warnings for the agent to ignore instructions that may be embedded within the tweet data.\n
- Capability inventory: The skill has capabilities to write to the local file system, perform network requests, and execute shell commands for data synchronization and scheduling.\n
- Sanitization: The script processes and stores tweet text without sanitization, creating a surface for potential downstream injection attacks.\n- [PERSISTENCE]: The skill includes instructions to establish recurring execution of monitoring tasks using system tools such as
cronandlaunchd.\n- [COMMAND_EXECUTION]: The skill leverages shell command execution to interface with external utilities likefeishu-clifor data export and management of scheduled tasks.\n- [EXTERNAL_DOWNLOADS]: The skill documentation suggests the installation of third-party tools likefeishu-cliandOpenClawto support extended functionality like Feishu synchronization and agent-managed scheduling.\n- [DATA_EXFILTRATION]: The Python script performs network operations toapi.twitterapi.ioto fetch data. This involves transmitting a user-provided API key to a third-party domain that is not on the whitelisted service list.
Audit Metadata