twitter-automation

SUSPICIOUS. The skill's capabilities match its stated Twitter/X automation purpose, but it relies on transitive skill installation, vendor-controlled CLI/install paths, and routes actions/auth through inference.sh rather than directly to X. That is coherent for the product, not confirmed malware, but it creates meaningful trust and autonomy risk disproportionate to a simple API wrapper.