felo-x-search
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious code patterns, obfuscation, or prompt injection vectors were identified. The skill's behavior is consistent with its stated purpose of retrieving social media data.
- [COMMAND_EXECUTION]: The provided script
scripts/run_x_search.mjssafely handles command-line arguments and environment variables. It avoids the use of high-risk functions such aseval()orexec()for processing user input. - [DATA_EXFILTRATION]: Network activity is restricted to the official Felo API at
openapi.felo.ai. The skill correctly manages theFELO_API_KEYby reading it from the environment rather than hardcoding it. - [EXTERNAL_DOWNLOADS]: The skill does not perform any remote code execution or download external scripts. It relies on standard Node.js built-in features for its operations.
Audit Metadata