social-scraping

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill requires scraping and searching social media platforms, comments, posts, and repositories across multiple third-party services (such as TikTok, Instagram, Reddit, and GitHub), where outsider-authored content is consumed via active search and fetch operations.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the execution of remote npx packages (agentcash) from an external package registry and interacts with paid remote API endpoints (stablesocial.dev), representing an unverified runtime external dependency.