read-x-blogger-analyzer

Warn

Audited by Snyk on Jul 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). 该技能的“自动抓取工作流程”会在运行时通过 scripts/fetch_tweets.py 使用 Playwright 访问 https://x.com/{username} 并读取推文 DOM 的 inner_text()(推文正文属于外部作者内容),随后这些文本会进入后续“AI 分析/生成报告”的上下文。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 11, 2026, 03:50 PM
Issues
1
Security Audit — snyk — read-x-blogger-analyzer