twitter-reader
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
curlvia Python'ssubprocessand shell scripts to fetch content from the Jina.ai Reader API. This is the primary function of the skill and is implemented with basic URL validation.\n- [INDIRECT_PROMPT_INJECTION]: The skill retrieves content from external Twitter/X URLs, which is then processed by the agent. This content could contain instructions designed to manipulate the agent's behavior.\n - Ingestion points:
scripts/fetch_tweet.pyandscripts/fetch_tweets.shretrieve external content from URLs.\n - Boundary markers: The skill does not use delimiters or warnings to isolate fetched content.\n
- Capability inventory: The agent has access to shell commands and file writing tools.\n
- Sanitization: Fetched content is not sanitized before being passed to the agent.
Audit Metadata