x-tweet-search
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.95). The skill navigates to X pages (search/profile/tweet URLs) and then runs
scripts/extract-tweets.pyto read tweet text and related fields from the live DOM/React Fiber (article[data-testid="tweet"]), which is outsider-authored free text from other users’ posts.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata