x-scraper
Warn
Audited by Snyk on Mar 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md and the scripts scrape_x_home.sh / scrape_x_user.sh) autonomously navigates to and scrapes public X (https://x.com/home, https://x.com/, and search pages) and parses user-generated tweets as part of its normal output-generation, exposing the agent to untrusted third-party content.
Audit Metadata