Oathe Security Badge

Is skills/x-twitter-scraper safe?

https://github.com/Xquik-dev/x-twitter-scraper/tree/master/skills/x-twitter-scraper

98
SAFE

This is a well-designed skill that provides X (Twitter) data access through the Xquik API with strong security practices. It contains only documentation, requires explicit user consent for sensitive operations, and properly treats external content as untrusted.

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 100/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 95/100 · 5%

Findings (2)

LOW External API endpoint references -5

Skill references external endpoints that agents will fetch, but these are legitimate first-party services with proper security controls

INFO Dependency on external service -5

Skill functionality depends on Xquik service availability and security, but this is clearly documented and expected