fetch-tweet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches public social media posts from X/Twitter via an API based on user-provided URLs, representing user-selected content retrieval rather than automated monitoring of an unvetted inbox or feed.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill queries the FxEmbed API (api.fxtwitter.com) at runtime to retrieve tweet data, representing a common unofficial operational dependency.