he4rt-twitter-engagement-tracker

SUSPICIOUS: the main extension design is broadly aligned with Twitter engagement tracking, but the skill’s footprint expands from local passive capture to autonomous third-party export of detailed interaction data. No strong malware or supply-chain indicators are present, yet the webhook/auto-push patterns and API-key handling make the skill medium-high risk.