twitter-thread-creation
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: References installation documentation for the infsh CLI tool from the inference-sh GitHub repository.- [COMMAND_EXECUTION]: Employs the infsh CLI tool via Bash to execute commands for posting tweets, generating images from HTML, and capturing website screenshots.- [PROMPT_INJECTION]: Identifies an indirect prompt injection surface where external data could influence agent behavior.
- Ingestion points: Data enters the agent context through the tavily/search-assistant and infsh/agent-browser tools during content research and visual generation.
- Boundary markers: None; the skill does not provide delimiters or instructions to ignore commands that may be embedded in the retrieved web content.
- Capability inventory: The agent can perform automated posting to a social media platform and generate visual content based on ingested data.
- Sanitization: Missing; the skill lacks explicit validation or sanitization steps for data retrieved from external sources before it is used as input for CLI tool parameters.
Audit Metadata