twitter-api
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill reads local media files and transmits them along with tweet text to the official Twitter API endpoints (
api.twitter.comandupload.twitter.com). This behavior is the primary intended function of the skill and occurs only when triggered by user requests. - [COMMAND_EXECUTION]: The skill is implemented as a TypeScript script executed via the Bun runtime. It processes command-line arguments to perform specific Twitter actions.
- [CREDENTIALS_UNSAFE]: The skill requires several sensitive API keys and tokens. It follows security best practices by instructing the user to provide these secrets via environment variables or a local
.envfile rather than hardcoding them in the source code. - [EXTERNAL_DOWNLOADS]: The project uses standard, well-known Node.js packages (
oauth-1.0aandcrypto-js) to handle authentication and cryptographic signatures required by the Twitter API.
Audit Metadata