x-feed-summarizer
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly connects a logged-in browser to open and eval content from https://x.com/home (see "Step 1: Navigate" and the JS eval in "Step 3") and parses/summarizes user-generated X/Twitter posts, which are untrusted third-party content that the agent reads and acts on as part of its workflow.
Audit Metadata