x-twitter-scraper

The skill’s footprint is coherent with its described purpose: it uses a logged-in Chrome CDP session to scrape Twitter content and outputs structured JSON. There are no obvious credential-handling or external download/execution patterns, and the data access is limited to the authenticated browser session. However, because the scraped data may be sensitive (private profiles, rate-limited content) and because output sinks are not strictly limited or secured in the snippet, there is a moderate data-flow risk if the agent’s environment stores or transmits the data elsewhere. Overall, the skill is BENIGN with MEDIUM SUSPICION due to potential data-flow exposure in execution environments and the reliance on a local authenticated session rather than official API controls.