tweet-thread-from-blog
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches content from external, untrusted URLs to generate Twitter threads. This creates a surface for indirect prompt injection where a malicious website could contain instructions that influence the agent's behavior.
- Ingestion points: External content is fetched using WebFetch or Chrome DevTools in Step 2 of SKILL.md.
- Boundary markers: The skill lacks explicit boundary markers (e.g., XML tags or clear 'ignore instructions' warnings) when interpolating the fetched content into its processing logic.
- Capability inventory: The skill has the capability to post content externally to X/Twitter via the Composio
TWITTER_CREATION_OF_A_POSTaction. - Sanitization: While the skill implements formatting checks and a banned word list, it does not explicitly sanitize the input text to prevent malicious instruction execution.
Audit Metadata