baoyu-danger-x-to-markdown

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The code intentionally collects X (Twitter) authentication tokens/cookies, persists them to a local cookies.json, and logs truncated token values to console — this exposes sensitive credentials (credential leakage/storage) though I did not find any obvious remote exfiltration or remote-backdoor behavior.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). [SKILL.md → scripts/main.ts] ingests insider/outside-authored free text from X (tweet/thread/article content and media URLs) by fetching user-supplied and converting the returned text into markdown at runtime.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I scanned the repository for literal, high-entropy credentials. I found a long, bearer-token-looking string hardcoded in scripts/constants.ts. This is a high-entropy, literal authorization header value (DEFAULT_BEARER_TOKEN) which qualifies as a secret (an API bearer token).

I did NOT flag other random-looking IDs (query IDs, feature flags) because they are identifiers used as fallbacks, not credentials, and I ignored environment variable names and documentation placeholders per the rules.