x-tweet-by-url
What this skill does
The skill is designed to scrape tweets from X (Twitter) URLs, normalize the data, and return structured per-tweet information. It supports various URL types (search, profile, single tweet, list) and i
github/browser-act - Data Exfiltration Risk - 5.3k stars
Threat analysis
Skill info
pkg:github/browser-act/skills@4577dc5?skill=x-tweet-by-urlAssessments (2)
Data Exfiltration Risk
Data Exfiltration Risk via local-llm-review
scripts/classify-url.py
The script processes URLs and normalizes them, but there is no explicit mention of data exfiltration. However, the lack of input validation or sanitization on the URL input could allow for injection oCode Quality / Maintainability
Code Quality / Maintainability via local-llm-review
scripts/parse-tweets.py
The script attempts to parse a JSON body from a network request, but the error handling is incomplete. If the JSON parsing fails, the script may not provide sufficient feedback or handle the error graBadge
Add the Anomity scan badge for x-tweet-by-url to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of x-tweet-by-url? Report an issue or request a rescan.
