x-twitter-scraper
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to clone its companion repository from the author's GitHub organization (Xquik-dev) using a specific commit hash to ensure integrity.
- [EXTERNAL_DOWNLOADS]: Recommends the installation of the vendor's official SDK package
x-developerat a pinned version (2.4.16) from a public registry. - [COMMAND_EXECUTION]: Includes shell commands for repository cloning, inspection, and the secure setup of API credentials via environment variables using
readto avoid leaking keys in shell history. - [DATA_EXFILTRATION]: Performs network requests to the vendor's API endpoints at
xquik.comfor tweet retrieval, user lookup, and account automation tasks. This behavior is documented and inherent to the skill's primary purpose. - [PROMPT_INJECTION]: The skill processes untrusted data from external sources (tweets, bios, search results) which presents an indirect injection surface.
- Ingestion points: API responses from
xquik.comcontaining tweet text, user profiles, and search results are ingested into the agent context. - Boundary markers: The skill contains explicit instructions requiring the agent to obtain user approval before executing any state-changing actions like posting, replying, or sending DMs.
- Capability inventory: The skill possesses capabilities to write to X/Twitter accounts and perform bulk data extraction via the Xquik API.
- Sanitization: No specific technical delimiters or sanitization logic is provided in this documentation-only file.
Audit Metadata