scrapesocial-x
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
scrapesocialglobal Node.js package from the official registry. This package is the primary CLI tool required for the skill's functionality and is managed by the skill's author. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from X (Twitter), including profiles, posts, and video transcripts, which creates a surface for indirect prompt injection.
- Ingestion points: Untrusted data enters the agent's context through commands such as
x posts,x posts get, andx transcriptdefined inSKILL.md. - Boundary markers: The skill does not explicitly define delimiters or instructions to ignore embedded commands within the fetched social media data.
- Capability inventory: The skill is limited to read-only research operations; it does not include commands for file system modification, network exfiltration of local data, or persistent system changes.
- Sanitization: No specific sanitization or filtering logic is prescribed for the ingested external content.
Audit Metadata