xcli

SUSPICIOUS. The purpose broadly matches X API automation, but the core capability is mediated by an undocumented, unverifiable `xcli` binary that likely receives OAuth credentials and can perform high-impact account actions. With no trusted install/source evidence for `xcli`, this skill has a disproportionate supply-chain and credential-forwarding risk despite a plausible stated purpose.