social-scraping

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to take a JWT token returned by the trigger step and include it verbatim in subsequent fetch calls (e.g., as a query param), which requires the LLM to handle and output secret tokens directly, creating exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md directs the agent to fetch and ingest public, user-generated social media content (profiles, posts, comments, followers) via StableSocial API endpoints such as https://stablesocial.dev/api/instagram/... and similar TikTok/Reddit/Facebook/LinkedIn endpoints, so untrusted third-party content is read and used to drive analysis and next actions.