read-x-blogger-analyzer
Warn
Audited by Snyk on Jul 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). 该技能的“自动抓取工作流程”会在运行时通过
scripts/fetch_tweets.py使用 Playwright 访问https://x.com/{username}并读取推文 DOM 的inner_text()(推文正文属于外部作者内容),随后这些文本会进入后续“AI 分析/生成报告”的上下文。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata