last30days

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to prompt the user to "paste" an xAI API key and to write it into .env (AskUserQuestion / just-in-time X unlock), which requires collecting user secrets and could lead to the key being embedded in generated commands or outputs — a direct secret-handling/exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The /last30days skill runtime ingests outsider-authored free text from public social/platform content (e.g., Reddit posts/comments, X posts/replies, YouTube transcripts and top comments, TikTok captions/snippets, Instagram captions, HN comments, and Polymarket question text) as part of its required “Run the engine” workflow (scripts/last30days.py fetching + rendering --emit=compact).