typefully
Warn
Audited by Snyk on Feb 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill directly fetches user-generated social media content via the Typefully API (see scripts/typefully_client.py methods like get_drafts/get_draft and the SKILL.md/README workflows such as "Show me last week's analytics" and "List drafts"), and the agent is expected to read that untrusted content and may take publishing/scheduling actions based on it, enabling indirect prompt injection.
Audit Metadata