x-twitter-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow consumes monitored events and webhooks from external X (Twitter) accounts via the Xquik API, where outsiders can post messages and trigger webhooks or feeds read by the agent.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a data scraping and social media interaction API (Xquik) where billing, top-ups, card charges, and plan changes are handled exclusively by the user inside the external Xquik dashboard (SKILL.md:154-155). The agent does not perform direct financial transfers, charges, or purchases itself. Therefore, the financial operation is indirect (billable usage via API consumption).