OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
The skill enables scraping of X (Twitter) via the Apify API. It requires an Apify API token and uses standard command-line tools (curl, jq) to interact with the service. No malicious behavior was detected, though the skill is inherently susceptible to indirect prompt injection from retrieved tweet content.
Detected behaviors
No alerts
1 issue
1/1 file flagged