x-tweet-search

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

Benign overall footprint: the skill's stated purpose (searching X tweets via API using a Bearer Token) is coherent with its implementation. The main security considerations are proper handling of the Bearer Token to avoid accidental leakage (logs, stdout redaction) and ensuring user input is safely encoded into API requests to prevent command-injection-like risks. No evidence of unauthorized data exfiltration beyond the intended API interaction, and no unverifiable binaries or third-party tool installations are involved. With proper input encoding, secure token handling, and limited scope, the risk remains moderate (suspicious if token handling is lax).

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 10:41 AM
Package URL
pkg:socket/skills-sh/b-open-io%2Fprompts%2Fx-tweet-search%2F@ce48d90909d737b89627ed7cd3b461aa912aa51b