twitter-automation
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill enables the agent to retrieve and process content from Twitter/X using apps such as
x/post-getandx/user-get. This creates a surface for indirect prompt injection where malicious instructions embedded in tweets or user profiles could attempt to manipulate the agent's logic.\n - Ingestion points: Data retrieved from external Twitter/X posts and user profile metadata (SKILL.md).\n
- Boundary markers: The instructions lack explicit boundary markers or directives to the agent to treat external content as untrusted data rather than instructions.\n
- Capability inventory: The skill provides broad capabilities to act on the platform, including posting tweets (
x/post-tweet), liking content (x/post-like), and following users (x/user-follow).\n - Sanitization: No sanitization or validation protocols are defined for the data retrieved from external sources before it is processed by the agent.
Audit Metadata