social-sentiment-analyzer
Fail
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: HIGHDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill fetches and analyzes social media posts from Twitter, Reddit, and Instagram. These untrusted external sources could contain malicious instructions designed to manipulate the agent's behavior. Ingestion points: Social media posts fetched via Xpoz tools. Boundary markers: Absent. Capability inventory: Shell execution via subprocess.run and package installation capabilities. Sanitization: Absent.
- [DATA_EXFILTRATION]: The skill performs network requests to api.xpoz.ai and mcp.xpoz.ai for authentication. These operations are part of the intended authentication flow for the vendor's service.
- [COMMAND_EXECUTION]: The skill uses subprocess.run to configure the mcporter tool with an OAuth token fetched from the vendor's API. This is a functional step in the authentication process.
- [EXTERNAL_DOWNLOADS]: The skill installs the xpoz Python package and the @xpoz/xpoz Node.js package, which are official vendor SDKs.
Recommendations
- HIGH: Downloads and executes remote code from: https://mcp.xpoz.ai/oauth/token - DO NOT USE without thorough review
Audit Metadata