search-x
Warn
Audited by Snyk on Apr 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill (see scripts/search.js and SKILL.md/README) calls xAI's Responses API with the x_search tool to fetch real tweets from X/Twitter—public, user-generated content that the agent ingests and returns, so external tweet text can influence its outputs and subsequent behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata