twscrape

SUSPICIOUS. The skill is internally coherent and installs from a verifiable official source, so this is not malware-like supply-chain behavior. However, its purpose is unofficial scraping that depends on rotating real accounts and supplying X credentials, cookies, email credentials, and optional proxies, which is a disproportionate and high-sensitivity footprint for most agent use; risk is medium even though malicious intent is not confirmed.