find-viral-tweets

Warn

Audited by Snyk on Apr 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The SKILL.md "Typical flow" (steps 2–3) explicitly fetches tweets via GET /x/tweets/search from xquik.com and presents user-generated tweet text (untrusted third‑party content) for the agent to read and analyze, which could allow embedded instructions to influence subsequent behavior.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 27, 2026, 09:38 AM
Issues
1