twitter-automation

Fail

Audited by Snyk on Feb 18, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.90). The URLs point to a non-standard third‑party domain and the skill explicitly instructs running a remote installer via "curl ... | sh" (cli.inference.sh), a high‑risk pattern that can deliver arbitrary/malicious code or executables from hosted files.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill includes apps like x/post-get and x/user-get which retrieve tweets and user profiles from X.com (public, user-generated social media content), so the agent will ingest untrusted third‑party content that could contain indirect prompt injections.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 18, 2026, 01:33 AM