superx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads incoming outsider-authored messages via replies:received, engage:mentions, engage:posts, signals:leads, and x:post / x:replies at runtime, creating an indirect prompt injection risk from user-submitted content on X.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The instruction installs superx-cli from https://www.npmjs.com/package/superx-cli, which is a recognized package registry transporter for an established third-party project without a strong official first-party enterprise publisher provenance, placing it in the medium tier.