Skills
skills/neekware/ehayeskills/x-twitter-growth/Gen Agent Trust Hub

x-twitter-growth

Warn

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: MEDIUMDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [DATA_EXFILTRATION]: Path Traversal Vulnerability in scripts/growth_tracker.py. The handle argument is used to construct file paths without sanitizing directory traversal sequences like ... This allows reading or writing .jsonl files outside the intended data directory. Evidence: filepath = os.path.join(DATA_DIR, f"{clean}.jsonl").
  • [DATA_EXFILTRATION]: Arbitrary File Read in scripts/competitor_analyzer.py. The --import flag allows the script to load and parse any user-specified JSON file on the system. Evidence: if args.import_file: with open(args.import_file) as f: data = json.load(f).
  • [PROMPT_INJECTION]: Indirect Prompt Injection Surface. (1) Ingestion point: handle argument in scripts/growth_tracker.py. (2) Boundary markers: Absent. (3) Capability inventory: Local file read/write operations. (4) Sanitization: Absent (uses only lstrip and lower).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 12, 2026, 08:17 AM
Security Audit — agent-trust-hub — x-twitter-growth