engagement-tracker

SUSPICIOUS. The skill's analytics purpose is plausible, and most data flows go to official Reddit/X services, but it relies on browser-session scraping and a user-specified local Twikit environment with no provenance controls. Because it forwards Twitter/X session cookies to third-party local code that the skill does not verify, the overall risk is high even without clear evidence of intentional exfiltration.