x-tools
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill implements a workflow for ingesting and processing untrusted data from X/Twitter, which constitutes a surface for indirect prompt injection.\n
- Ingestion points: External data enters the system through
normalize_x_dataset.mjsand is used by analytical scripts likecluster_x_bios_and_posts.mjs.\n - Boundary markers: Data artifacts are managed using structured JSON or wrapped in specific markdown markers (
<!-- postplus:block ... -->) in therenderMarkdownBackupfunction.\n - Capability inventory: The skill can execute local commands (
yt-dlp,ffmpeg), perform network requests via a shared runtime, and manage local project files.\n - Sanitization: The skill applies multiple sanitization layers including
cleanString,safeLower,escapeHtml, andescapeSvgTextbefore rendering or processing external content.\n- [COMMAND_EXECUTION]: Local scripts execute subprocesses for media processing. Specifically,download_videos_from_manifest_with_ytdlp.mjsspawnsyt-dlpto download video content, andPostPlusWorkspaceRuntime.mjsusesffmpegfor video generation. These operations use argument arrays to prevent command injection and are essential to the skill's primary research functions.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading media files from X/Twitter URLs using theyt-dlputility. This behavior is expected for a research tool focused on social media content collection.
Audit Metadata