social-x-post-card
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's HTML template fetches styling from
cdn.tailwindcss.comand fonts fromfonts.googleapis.com. These are industry-standard, well-known services for web assets.\n- [SAFE]: The design guidelines explicitly forbid external image URLs and use inline SVGs, which ensures that no tracking or unauthorized external requests occur during the rendering of the card.\n- [PROMPT_INJECTION]: The skill processes user-supplied text to populate the tweet card. While this is an ingestion point for untrusted data, the rendering is limited to static HTML and CSS, which lacks the capability to execute commands or exfiltrate data.
Audit Metadata