screen-stocks

Warn

Audited by Snyk on Apr 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly calls a Grok/X (Twitter)/web search client at runtime (see run_trending_mode and run_auto_theme_mode in scripts/run_screen.py and the SKILL.md sections describing "Grok API (X/Web search)" and --auto-theme), ingesting untrusted user-generated web/Twitter content which directly determines themes/tickers used for screening and thus can materially influence subsequent tool actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 25, 2026, 11:41 AM
Issues
1