felo-x-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly calls the Felo Open API endpoints to fetch X/Twitter user profiles, tweets, and tweet replies (see SKILL.md and scripts/run_x_search.mjs which POST to https://openapi.felo.ai/v2/x/...), so the agent ingests public, user-generated social media content that it reads and uses to produce outputs and follow-up actions.