twitter-collector
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script uses Playwright to control a web browser. It is designed to connect to an existing Chrome instance via the Chrome DevTools Protocol (CDP) on the local port 9222 to perform automation tasks such as searching and scrolling on X.com.
- [EXTERNAL_DOWNLOADS]: The project depends on the
playwrightpackage, which is installed via standard package managers. It also includes instructions to download the Chromium browser engine. - [DATA_EXFILTRATION]: The skill includes functionality to navigate to a third-party website (
twitterhot.vercel.app) and programmatically paste collected tweet URLs into a form for further processing. This is a documented feature for filtering results. - [SAFE]: The script references a hardcoded local directory path (
/Users/douba/twitter-output) for saving output files such as text lists and HTML previews.
Audit Metadata