twitter-thread-creation

Fail

Audited by Socket on Feb 25, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The skill description targets posting Twitter/X threads via a remote CLI, but the install pattern (curl | sh) and reliance on external binaries introduce meaningful supply-chain and runtime trust risks. Checksum verification helps, but lack of in-repo provenance, signer verification, and explicit credential handling details raise concerns. Treat as SUSPICIOUS with elevated supply-chain risk; require safer distribution, signed artifacts, and explicit, secure credential management before adoption.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 25, 2026, 05:39 PM
Package URL
pkg:socket/skills-sh/inference-sh-9%2Fskills%2Ftwitter-thread-creation%2F@2753030997abaa5259e1d85f767ce8ee3e30e536