Warn
Audited by Socket on Mar 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s capabilities are mostly aligned and read-only, but it routes Twitter/X lookups and the required API key through twitterapi.io instead of official X APIs. This is not confirmed malware, but the intermediary data flow and credential forwarding make it a medium-risk third-party integration.
Confidence: 91%Severity: 58%
Audit Metadata