social-sentiment-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches authentication tokens and dynamic client registration data from the vendor's official domain (
mcp.xpoz.ai) to establish a secure connection. - [COMMAND_EXECUTION]: The authentication script uses
subprocess.runto configure themcporterCLI tool with the retrieved OAuth token. This is a legitimate setup procedure performed during the manual authentication flow. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill ingests user-generated content from Twitter, Reddit, and Instagram via the Xpoz API for sentiment classification.
- Boundary markers: No explicit delimiters or boundary markers are defined in the instructions to isolate the ingested social media content.
- Capability inventory: The skill has access to network operations (via
urllib.request) and command execution (viasubprocess.run) used for authentication and configuration. - Sanitization: The skill processes external text for sentiment and theme extraction without specific sanitization or filtering instructions.
Audit Metadata