skills/zocomputer/skills/twitter-api/Gen Agent Trust Hub

twitter-api

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill reads local media files and transmits them along with tweet text to the official Twitter API endpoints (api.twitter.com and upload.twitter.com). This behavior is the primary intended function of the skill and occurs only when triggered by user requests.
  • [COMMAND_EXECUTION]: The skill is implemented as a TypeScript script executed via the Bun runtime. It processes command-line arguments to perform specific Twitter actions.
  • [CREDENTIALS_UNSAFE]: The skill requires several sensitive API keys and tokens. It follows security best practices by instructing the user to provide these secrets via environment variables or a local .env file rather than hardcoding them in the source code.
  • [EXTERNAL_DOWNLOADS]: The project uses standard, well-known Node.js packages (oauth-1.0a and crypto-js) to handle authentication and cryptographic signatures required by the Twitter API.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 07:32 AM