twitterapi-io
Warn
Audited by Snyk on Apr 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's CLI (scripts/twitterapi_io.py) repeatedly calls twitterapi.io endpoints via curl_json (e.g., /twitter/tweets, /twitter/tweet/advanced_search, /twitter/tweet/replies, /twitter/user/mentions) to fetch and return user-generated public tweets/threads (see SKILL.md and references/links.md), which the agent is expected to read/interpret as part of its workflow and could therefore carry instructions that influence subsequent behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata