The x-publisher skill is vulnerable to
Claims to do
X (Twitter) 推文发布工具: 使用官方 Tweepy 库发布推文,支持纯文本、图片、视频等多种媒体类型。
Actually does
This skill uses `python3` and the `tweepy` library to interact with the X (Twitter) API. It reads X API credentials from environment variables and allows users to publish text-only tweets or tweets with local image/video files. It also provides a `verify` command to check API credentials and returns tweet IDs and URLs upon successful publication.
openclaw skills install manifoldor/x-publisherDeBERTa classifier detected prompt injection (confidence: 0.83)
The skill describes executing an external Python script (`scripts/x_publisher.py`) with arguments (`text`, `--media`) that can be controlled by an attacker. If the underlying script does not properly sanitize these inputs, it could lead to arbitrary command injection.
python3 scripts/x_publisher.py tweet "Hello, X! This is my first tweet."
The skill enables publishing local media files to a public platform (X) by specifying a file path via the `--media` argument. An attacker could manipulate an agent to provide a path to a sensitive local file, leading to its exfiltration.
python3 scripts/x_publisher.py tweet "Check out this photo!" --media /path/to/image.jpg
[](https://mondoo.com/ai-agent-security/skills/clawhub/manifoldor/x-publisher)<a href="https://mondoo.com/ai-agent-security/skills/clawhub/manifoldor/x-publisher"><img src="https://mondoo.com/ai-agent-security/api/badge/clawhub/manifoldor/x-publisher.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/clawhub/manifoldor/x-publisher.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.