alphai-twitter

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose matches social-media monitoring, but its data flow is mediated entirely through Alph.ai rather than official X APIs and it relies on a raw session cookie (`dex_cookie`). That third-party gateway model is disproportionate from a data-integrity standpoint and creates credential/privacy exposure, though there is no evidence here of malware, hidden execution, or malicious install behavior.

Confidence: 87%Severity: 64%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:34 PM
Package URL
pkg:socket/skills-sh/alph-ai-official%2Fskills%2Falphai-twitter%2F@ae934a8feffa4960b4c30f8d4ca8fab2828152fb