tweetsmash-api
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Interacts with official TweetSmash API endpoints at api.tweetsmash.com. Authentication is securely managed through a user-provided TWEETSMASH_API_KEY environment variable, avoiding hardcoded secrets.\n- [COMMAND_EXECUTION]: The skill uses a local script scripts/build-bookmarks-url.py to safely generate encoded query parameters for API requests. Technical analysis of the script confirms it uses standard library functions (argparse and urllib.parse) and contains no dangerous system calls or network operations.\n- [SAFE]: No evidence of prompt injection, unauthorized data exfiltration, or obfuscation was found within the skill's instructions, assets, or reference documentation.
Audit Metadata