twitter-engager
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon untrusted external data from Twitter, which could contain malicious instructions meant to influence the agent's behavior.
- Ingestion points: The skill monitors trending topics, hashtags, brand mentions, and direct messages (SKILL.md).
- Boundary markers: None. The instructions do not specify delimiters or provide guidance to ignore instructions embedded within external tweets or messages.
- Capability inventory: The skill facilitates automated responses, thread creation, and community engagement. No direct system-level execution capabilities (like shell access or code eval) are present in this specific file.
- Sanitization: There are no instructions for sanitizing or validating the content retrieved from external sources before the agent processes or responds to it.
Audit Metadata