twitter-x-hub

SUSPICIOUS. The skill is purpose-aligned as an X/Twitter automation client, but it achieves that by collecting and forwarding raw session cookies, using undocumented internal APIs, and enabling autonomous account actions. Install trust is moderate, not the main issue; the main risk is high-privilege credential handling and real account activity.