x-research
Warn
Audited by Snyk on Jun 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.95). Outsider free text from other users’ X posts (including their
textanddescription) is ingested into the agent’s LLM context via the runtime path where the scripts call X API endpoints (e.g.,/2/tweets/search/*,/2/users/*/tweets,/2/tweets,/2/users/by/username/*) and then render those returned fields into Markdown/JSON output that the agent uses as context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata