twitterapi-io

Warn

Audited by Snyk on Apr 2, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's CLI (scripts/twitterapi_io.py) repeatedly calls twitterapi.io endpoints via curl_json (e.g., /twitter/tweets, /twitter/tweet/advanced_search, /twitter/tweet/replies, /twitter/user/mentions) to fetch and return user-generated public tweets/threads (see SKILL.md and references/links.md), which the agent is expected to read/interpret as part of its workflow and could therefore carry instructions that influence subsequent behavior.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 2, 2026, 12:57 AM
Issues
1