x-user-timeline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill's scripts/timeline.sh explicitly fetch tweets from the public X API (https://api.x.com/2/users/... ), which returns user-generated, untrusted content that the agent reads and interprets as part of its workflow (SKILL.md and scripts/timeline.sh), allowing third-party text to influence subsequent outputs or actions.