x-tools
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill reads from the vendor's local configuration file (e.g.,
~/.config/postplus/config.json) to retrieve session tokens and API base URLs. This is standard authentication behavior for the PostPlus ecosystem. - [COMMAND_EXECUTION]: The skill uses
node:child_processto executepython3 -m yt_dlpfor downloading videos identified during data collection. This is a functional requirement of the media processing workflow. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to the PostPlus API and other external resources to fetch and process Twitter data. These operations are conducted through a dedicated network runtime that supports proxies and secure connections.
Audit Metadata