x-scraper

Warn

Audited by Snyk on Mar 8, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md and the scripts scrape_x_home.sh / scrape_x_user.sh) autonomously navigates to and scrapes public X (https://x.com/home, https://x.com/, and search pages) and parses user-generated tweets as part of its normal output-generation, exposing the agent to untrusted third-party content.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 8, 2026, 03:13 AM