twitter-data-export
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches trial API keys and OAuth tokens from 'api.xpoz.ai' and 'mcp.xpoz.ai'. These are official endpoints for the vendor (XPOZpublic) used for legitimate authentication workflows.
- [COMMAND_EXECUTION]: Provides instructions to use
curlfor fetching trial keys andsubprocesswithin Python to configure themcporterCLI tool. These actions are transparently documented as part of the setup process. - [REMOTE_CODE_EXECUTION]: While the skill contains code to fetch data from remote APIs and process the JSON response, this is standard API interaction for data retrieval and does not involve executing arbitrary remote scripts or untrusted payloads.
- [CREDENTIALS_UNSAFE]: The skill correctly advises users to store API keys in environment variables (
XPOZ_API_KEY) and uses OAuth for secure authentication rather than hardcoding sensitive credentials.
Audit Metadata