tweet-replicate
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external command-line utilities including
ffmpeg,ffprobe, andyt-dlpusing thesubprocess.runfunction. It also manages a headless browser session via the Playwright library to render HTML and capture video. Analysis confirms that these operations use list-based arguments and avoid shell execution, minimizing command injection risks. - [EXTERNAL_DOWNLOADS]: The skill retrieves tweet metadata from the FixTwitter API and downloads media content from X/Twitter domains. These network requests are necessary for the skill's documented purpose of replicating social media posts and target expected service endpoints without unauthorized data exfiltration.
Audit Metadata