skills/athina-ai/goose-skills/twitter-profile-lookup/Socket

twitter-profile-lookup

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's capability matches its purpose, but its trust and data-flow model is weak. It reads a local credential file and forwards the bearer token through a Gooseworks proxy to Orthogonal/ScrapeCreators instead of using a direct official API, and the destination can be influenced by `api_base` in the credential file.

Confidence: 86%Severity: 64%

Audit Metadata

Analyzed At

Jul 2, 2026, 06:17 AM

Package URL

pkg:socket/skills-sh/athina-ai%2Fgoose-skills%2Ftwitter-profile-lookup%2F@9b9b05e05623068926b06dbff3580cb01fe1d4f2d3d51ab0986fd00af6df557d