Security audit

X Post Fetcher

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly aligned with fetching public X posts, but its login instructions include agent-typed username and password examples that create unnecessary credential exposure risk.

Install only if you are comfortable using an isolated browser session for X. Do not give your X password, MFA code, or recovery details to the agent or in chat; enter credentials yourself directly in the visible browser window, and clear or revoke the isolated X session when finished.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:103
Finding: Plaintext X Credentials May Be Exposed Through Agent-Controlled Browser Tool Calls
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger list ends with a broad catch-all phrase ('类似表达...的场景'), which can cause the skill to activate for loosely related requests rather than only explicit X/Twitter post-fetching tasks. Overbroad activation is risky here because the skill launches browser automation, may navigate to x.com, and can prompt login behavior, increasing the chance of unintended web actions and unnecessary exposure to authenticated sessions.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.