x-twitter-scraper
Warn
Audited by Snyk on May 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and processes public, user-generated X/Twitter content via the Xquik API (see SKILL.md examples like "Search X for tweets..." and endpoints such as /x/tweets/search and /x/users/{username} on https://xquik.com/api/v1), which the agent is expected to read and act on, creating clear exposure to untrusted third‑party content that could carry injected instructions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata