tweet-replicate

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes external command-line utilities including ffmpeg, ffprobe, and yt-dlp using the subprocess.run function. It also manages a headless browser session via the Playwright library to render HTML and capture video. Analysis confirms that these operations use list-based arguments and avoid shell execution, minimizing command injection risks.
  • [EXTERNAL_DOWNLOADS]: The skill retrieves tweet metadata from the FixTwitter API and downloads media content from X/Twitter domains. These network requests are necessary for the skill's documented purpose of replicating social media posts and target expected service endpoints without unauthorized data exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 01:25 AM