x-presence

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs making a POST that includes user credentials (username/password/totp_secret) in the request body, which requires the LLM/agent to accept and embed secrets verbatim into generated requests — a direct secret-handling/exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Multiple URLs point to twitr.sh — a non-official, likely typosquatting/third‑party domain providing API endpoints and docs (including account-connection flows) which is untrusted and could be used to collect credentials or deliver malicious payloads; the other URLs are official/documentation and are not flagged.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime the cycle executes “Read new events” via GET https://twitr.sh/api/monitors/{id}/events..., and those events include outsider-authored tweet/post text that is then passed through the drafting tool (POST .../x_compose) as “additionalContext” (e.g., “replying to @author who said: ...”), creating an indirect prompt-injection path from outsider content into the agent’s LLM context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly requires and uses the user's crypto wallet to pay for API actions: it states "Every call is paid per request from the user's wallet" and lists per-call costs, instructs to confirm wallet presence (x402 / AgentCash MCP), shows wallet-signed account connection, and documents creating prepaid monitors and write calls that charge the wallet (including guidance on which chains to pay on). These are concrete, wallet-backed payment operations (crypto/blockchain payments) and API endpoints that trigger paid transactions — i.e., direct financial execution capability.