x-trends

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md shows it calls the public API GET /trends?country= on https://xquik.com/api/v1 to fetch trending topic names and "context" (user-generated/untrusted content) which the agent reads and can feed into downstream actions (e.g., write-tweets/post-tweets), enabling indirect prompt injection.