x-article-converter
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SKILL.md workflow explicitly requires using WebSearch to find Twitter/X handles and to "Read the source article" (Step 1 and Step 2), which fetches and interprets public, user-generated web content (Twitter profiles/pages) and uses those results to decide who to tag and how to post, creating a clear avenue for untrusted third‑party content to influence agent actions.
Audit Metadata