social-cli
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly automates browsing and scraping public social platforms (e.g., TikTok "search"/"hot" that scrolls and collects Explore recommendations, TikTok
downloadextracting NEXT_DATA, X/Twittersearch, 币安广场/Binance Squaresearch, Boss直聘chat_stats, etc.), consuming untrusted user-generated content and using those results to drive actions (downloads, likes, comments, follows, analytics), which can materially influence tool behavior and enable indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata