x-tools

Pass

Audited by Gen Agent Trust Hub on May 8, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill reads from the vendor's local configuration file (e.g., ~/.config/postplus/config.json) to retrieve session tokens and API base URLs. This is standard authentication behavior for the PostPlus ecosystem.
  • [COMMAND_EXECUTION]: The skill uses node:child_process to execute python3 -m yt_dlp for downloading videos identified during data collection. This is a functional requirement of the media processing workflow.
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to the PostPlus API and other external resources to fetch and process Twitter data. These operations are conducted through a dedicated network runtime that supports proxies and secure connections.
Audit Metadata
Risk Level
SAFE
Analyzed
May 8, 2026, 06:37 AM