felo-x-search

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious code patterns, obfuscation, or prompt injection vectors were identified. The skill's behavior is consistent with its stated purpose of retrieving social media data.
  • [COMMAND_EXECUTION]: The provided script scripts/run_x_search.mjs safely handles command-line arguments and environment variables. It avoids the use of high-risk functions such as eval() or exec() for processing user input.
  • [DATA_EXFILTRATION]: Network activity is restricted to the official Felo API at openapi.felo.ai. The skill correctly manages the FELO_API_KEY by reading it from the environment rather than hardcoding it.
  • [EXTERNAL_DOWNLOADS]: The skill does not perform any remote code execution or download external scripts. It relies on standard Node.js built-in features for its operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 12:11 PM