Security audit
X Post Search by Gecho
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed X search workflow that uses Gecho Bridge and the user's logged-in browser session to collect public post data.
Before installing, understand that this requires a third-party Chrome extension and MCP server that operate through your logged-in browser session. Use it only for X searches you intend to run, review the Gecho Bridge package and extension trust boundary, and choose an appropriate save directory if storing results locally.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.