X Tweet Fetcher

• Analyzed: May 12, 2026, 4:04 AM
• Findings: 1
• Version: 0.1.0
• Hash: eb72342e0a344f488a7c09fc0f3fb73a61f83f1b3a1f430f46e15a7558bf74a7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill 'x-tweet-fetcher' is designed to fetch tweets from X/Twitter using the FxTwitter public API. The `fetch_tweet.py` script uses standard Python libraries (`urllib.request`, `json`, `re`) to make network requests exclusively to `https://api.fxtwitter.com`. There is no evidence of data exfiltration, malicious execution (e.g., `eval`/`exec` of untrusted input), persistence mechanisms, or prompt injection attempts against the agent in `SKILL.md`. The code's behavior is fully aligned with its stated purpose, and it does not introduce any high-risk capabilities beyond its declared function of querying a specific third-party API.