x-research
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the vendor's CLI tool,
postplus, to perform research tasks, such aspostplus research collectfor data gathering andpostplus research schemafor structure validation. - [EXTERNAL_DOWNLOADS]: The skill fetches public data from X via the vendor's hosted collection services during the execution of research commands.
- [PROMPT_INJECTION]: The skill processes untrusted public content from X, which presents a surface for indirect prompt injection.
- Ingestion points: Data enters the context from X posts, profiles, and replies via the
result.jsonfile generated by the CLI (referenced in SKILL.md). - Boundary markers: The skill employs a
shared-contract.mdwhich defines explicit data schemas and collection bounds (e.g., maxItems: 20) to limit the volume of untrusted data. - Capability inventory: The skill can execute shell commands via the
postplusCLI and perform file system operations to read/write request and result JSON files. - Sanitization: Instructions in
references/shared-contract.mdmandate separating raw post/profile facts from analysis and explicitly state to report sparse or low-signal output as gaps rather than processing it blindly. - [NO_CODE]: The skill package contains only markdown instructions and configuration files; it does not include any standalone scripts or binary executables.
Audit Metadata