x-api
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to official X (Twitter) API domains (api.x.com and upload.twitter.com). These are well-known, legitimate service endpoints required for the skill's functionality.
- [CREDENTIALS_UNSAFE]: The skill correctly demonstrates using environment variables (e.g., X_BEARER_TOKEN, X_API_KEY) for authentication. It provides explicit security guidance to avoid hardcoding secrets and to use .env files with .gitignore, which aligns with security best practices.
- [COMMAND_EXECUTION]: Code snippets show standard usage of the Python 'requests' and 'requests_oauthlib' libraries for API interaction. No arbitrary or dangerous command execution was detected.
Audit Metadata