ClawHub
Back to skill

Security audit

X Api

Security checks across malware telemetry and agentic risk

Overview

This skill does what it claims: it posts user-supplied text to X using the official API, with ordinary credential and dependency risks for that purpose.

Install only if you want Codex or your agent workflow to be able to post from your X account. Review tweet text before running the command, avoid posting secrets or private information, protect and restrict the X API token file, remove unexpected .x-api.json files from project directories, and consider pinning the npm dependency for reproducible installs.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill instructs users to post content to X, which is a public third-party service, but it does not clearly warn that submitted content will be transmitted externally and may become publicly visible. This omission can cause accidental disclosure of sensitive or private information, especially in an agent context where users may not realize the action is an external publication.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The setup documentation tells users to store API credentials in environment variables or a local JSON file but does not include guidance on secure handling of those secrets. This increases the risk of credential exposure through shell history, overly permissive file permissions, backups, logs, or accidental check-in to source control.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"version": "1.0.0",
  "type": "module",
  "dependencies": {
    "twitter-api-v2": "^1.19.0"
  }
}
Confidence
88% confidence
Finding
"twitter-api-v2": "^1.19.0"

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.