twitter-scraper
Warn
Audited by Snyk on Mar 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's scripts (scripts/search_twitter.py) and SKILL.md explicitly call the Apify actor apidojo/tweet-scraper and then fetch Twitter/X posts (public, user-generated content) via the Apify API/dataset endpoints, which the agent ingests and uses to filter, sort, and summarize—allowing untrusted third-party tweet content to influence subsequent outputs and decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata