x-twitter-scraper

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to clone its companion repository from the author's GitHub organization (Xquik-dev) using a specific commit hash to ensure integrity.
  • [EXTERNAL_DOWNLOADS]: Recommends the installation of the vendor's official SDK package x-developer at a pinned version (2.4.16) from a public registry.
  • [COMMAND_EXECUTION]: Includes shell commands for repository cloning, inspection, and the secure setup of API credentials via environment variables using read to avoid leaking keys in shell history.
  • [DATA_EXFILTRATION]: Performs network requests to the vendor's API endpoints at xquik.com for tweet retrieval, user lookup, and account automation tasks. This behavior is documented and inherent to the skill's primary purpose.
  • [PROMPT_INJECTION]: The skill processes untrusted data from external sources (tweets, bios, search results) which presents an indirect injection surface.
  • Ingestion points: API responses from xquik.com containing tweet text, user profiles, and search results are ingested into the agent context.
  • Boundary markers: The skill contains explicit instructions requiring the agent to obtain user approval before executing any state-changing actions like posting, replying, or sending DMs.
  • Capability inventory: The skill possesses capabilities to write to X/Twitter accounts and perform bulk data extraction via the Xquik API.
  • Sanitization: No specific technical delimiters or sanitization logic is provided in this documentation-only file.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 08:12 PM
Security Audit — agent-trust-hub — x-twitter-scraper