x-tweet-search-by-query
What this skill does
The skill is designed to search X (Twitter) using advanced queries and return normalized tweet data, including text, author information, engagement metrics, media, and pagination cursors. It is intend
github/browser-act - Data Exfiltration Risk - 5.3k stars
Threat analysis
Skill info
pkg:github/browser-act/skills@4577dc5?skill=x-tweet-search-by-queryAssessments (2)
Data Exfiltration Risk
Data Exfiltration Risk via local-llm-review
scripts/parse-tweets.py
The script reads a JSON file from the local filesystem using `open(args.json_file, 'r', encoding='utf-8')` and processes it. If this file contains sensitive data (e.g., credentials, private tweets), iInput Handling Risk
Input Handling Risk via local-llm-review
scripts/build-search-url.py
The script uses `argparse` to process user input, but there is no explicit validation or sanitization of the `raw_query` argument. This could allow for injection of malicious search terms or unexpecteBadge
Add the Anomity scan badge for x-tweet-search-by-query to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of x-tweet-search-by-query? Report an issue or request a rescan.
