x-article-converter

Warn

Audited by Snyk on Mar 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The SKILL.md workflow explicitly requires using WebSearch to find Twitter/X handles and to "Read the source article" (Step 1 and Step 2), which fetches and interprets public, user-generated web content (Twitter profiles/pages) and uses those results to decide who to tag and how to post, creating a clear avenue for untrusted third‑party content to influence agent actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 10, 2026, 12:38 AM