x-trends-hardened
Warn
Audited by Snyk on Apr 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and parses live HTML from the public aggregator getdaytrends.com (see index.js's fetchTrends() and SKILL.md "Powered by getdaytrends.com"), so it ingests untrusted, user-generated trending content as part of its workflow which could be used to drive downstream actions (e.g., drafting/posting or triggering scripts) and thus enables indirect prompt-injection risk.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata