x-api

Warn

Audited by Snyk on Jul 4, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). Outsider free text can enter the LLM context via runtime X API responses (e.g., GET /2/tweets/search/recent, GET /2/users/:id/tweets, GET /2/users/by/username), where tweet body/description text is authored by other users and is returned as readable JSON fields.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 4, 2026, 07:06 PM
Issues
1