skills/jeffli1993/content-repurposing-skills/blog-to-twitter-post/Snyk

blog-to-twitter-post

Warn

Audited by Snyk on Jul 23, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). The required workflow ingests the user-provided blog content (via pasted text/Markdown/HTML or fetching a provided URL) and may also browse X Explore Trending and other third-party pages at runtime, so any outsider-authored page text/trend text can enter the LLM context through the “fetch article first” and “use X Explore Trending… use Google News… reputable source pages” paths.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (high risk: 0.70). The skill instructs at runtime to fetch X Explore Trending and refresh official X docs (e.g., https://x.com/explore/tabs/trending and the listed help/docs URLs) to adapt post content and platform rules, so remote page content would directly influence the agent's prompts/output.

Issues (2)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 23, 2026, 03:53 AM

Issues

2

Security Audit — snyk — blog-to-twitter-post