x-api
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted user-generated content from X via search and timeline endpoints, which could lead to indirect prompt injection. \n
- Ingestion points: api.x.com search and user timeline endpoints in SKILL.md. \n
- Capability inventory: Methods for posting tweets, uploading media, and general Python execution capabilities. \n
- Boundary markers: Missing delimiters or instructions to the agent to treat external content strictly as data. \n
- Sanitization: No evidence of validation or sanitization for content retrieved from external API calls.
Audit Metadata