twitter-thread-creation
Warn
Audited by Socket on Jul 7, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s social-media purpose broadly matches thread drafting, but its actual footprint goes beyond writing into public posting, web research, media generation, and transitive skill installation through an external CLI. The main concerns are autonomous public posting, broad `belt` command access, indirect prompt-injection from fetched content, and unclear publisher/provenance alignment between `belt-sh` and `inference.sh`.
Confidence: 85%Severity: 74%
Audit Metadata