X / Twitter Search

• Analyzed: May 12, 2026, 4:27 AM
• Findings: 1
• Version: 1.0.1
• Hash: 5880fc2a8a8c685f478d770b6d26685cc4a34ec31dfa0e3f845cc5206f737de8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to a prompt injection vulnerability in `scripts/search.js`. The user's search query (`options.query`) is directly embedded into the `payload.input` sent to the xAI Grok model without sufficient sanitization. While the script's `extractContent` function attempts to filter the model's response, a malicious query could potentially manipulate the Grok model's behavior or lead to unintended information disclosure from the model's context. However, there is no evidence of intentional malicious behavior such as data exfiltration to unauthorized endpoints or installation of backdoors; network calls are confined to `api.x.ai` and `api.x.com` as declared in `SKILL.md`.