x-tweet-fetcher

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/fetch_china.py

The code appears intended for platform content retrieval and shows no clear malware behavior. The main security concern is SSRF from weak URL validation, particularly Weixin's direct request and Camofox navigation. Treat URLs as untrusted and validate their parsed scheme and hostname before fetching; protect supplied cookies and the router-agent command queue.

Confidence: 96%Severity: 55%
Audit Metadata
Analyzed At
Oct 3, 2026, 08:11 AM
Package URL
pkg:socket/skills-sh/aaaaqwq%2Fagi-super-team%2Fx-tweet-fetcher%2F@b8837f1dcd2f7aedf69d26a9e04a9248002a90b918b39cd6ac7ae5dcfac806f5