twitter-thread-creation

Fail

Audited by Socket on Mar 27, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS: The core purpose mostly matches the capabilities, and the inference.sh installer appears same-org and partly verifiable, so this is not clear malware. However, the skill grants broad bash use, enables autonomous public posting, processes untrusted web content, and encourages transitive skill installation. Those combined behaviors make it high security risk for an AI agent despite a plausible social-media purpose.

Confidence: 83%Severity: 72%
Audit Metadata
Analyzed At
Mar 27, 2026, 02:29 PM
Package URL
pkg:socket/skills-sh/inference-sh-8%2Fskills%2Ftwitter-thread-creation%2F@554a9e09cd8748e93939d4920dc6419e7c2ab286