fetch-tweet
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The required runtime path uses
WebFetchto retrieve tweet content from the outsider-authored public X/Twitter post viahttps://api.fxtwitter.com/<user>/status/<id>, and the returned JSON includes the tweet’s free text which is then provided to the agent/LLM context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata