twitter

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s capabilities are mostly aligned and read-only, but it routes Twitter/X lookups and the required API key through twitterapi.io instead of official X APIs. This is not confirmed malware, but the intermediary data flow and credential forwarding make it a medium-risk third-party integration.

Confidence: 91%Severity: 58%
Audit Metadata
Analyzed At
Mar 14, 2026, 07:02 AM
Package URL
pkg:socket/skills-sh/Starchild-ai-agent%2Fofficial-skills%2Ftwitter%2F@6bd19cccddfcb7355a3efc57789f42c40cae666e