x-twitter-data

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). All URLs point to a non-official twitr.sh domain that appears to typosquat/imitate X (Twitter) and offers a paid API (not an official vendor), which is a strong indicator of a suspicious/untrusted download or service origin.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md describes runtime POST calls to twitr.sh volume tools (x_search/x_timeline/x_lists/x_communities/x_radar) that can ingest free-text query parameters provided by the user, but it does not indicate the agent reads arbitrary outsider-authored content unless it explicitly searches for it.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly implements a pay-to-use API flow: it returns a 402 with an exact price, requires the client to pay and retry, and documents an AgentCash MCP call (mcp__agentcash__fetch) to perform the payment/signing. These are specific payment-execution primitives (a payment API/method), not generic request tooling, so the skill grants direct financial execution capability.