Agent Content Pipeline

• Outcome: Review
• Latest audit: May 28, 2026, 4:49 AM
• Version:
  0.2.3

Overview

The skill mostly matches its stated content workflow, but it needs Review because it can install a global posting tool and asks users to handle social-media session cookies.

Install only if you trust the external npm package and are comfortable granting it access to social-media posting credentials. Prefer dry runs, a dedicated browser profile or test account, secure mode, and avoid pasting auth_token or ct0 anywhere except the local CLI prompt.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The skill explicitly instructs users to manually extract `auth_token` and `ct0` cookies from x.com without a clear warning that these are sensitive session credentials equivalent to account access. Even though the skill frames this as a fallback for posting, documenting raw cookie extraction increases the chance of unsafe handling, leakage into logs/chat, or reuse outside the intended encrypted local flow.

VirusTotal

63/63 vendors flagged this skill as clean.