fetch-tweets
Warn
Audited by Snyk on Aug 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the required runtime workflow passes the user-controlled
${ARG}/${TOPIC}/${ACCOUNT}into the Grokx_searchtool (via a directcurltohttps://api.x.ai/v1/responses), so outsider-authored text from X search results (tweet full text) is ingested for ranking/insight extraction without first selecting a specific pre-vetted item.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata