twitter-automation

Warn

Audited by Socket on Jul 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose and actions are coherent for Twitter automation, but it relies on a broad external CLI, routes credentials and actions through inference.sh infrastructure, recommends transitive skill installs, and enables autonomous public posting/DM actions. This is not confirmed malware, but it carries meaningful trust and account-abuse risk.

Confidence: 86%Severity: 74%
Audit Metadata
Analyzed At
Jul 24, 2026, 05:06 AM
Package URL
pkg:socket/skills-sh/autohandai%2Fcommunity-skills%2Ftwitter-automation%2F@7f4f903e7f056aa6b9fc52b39a03a8b7d82334075c2d23875e632f18d49dc2a1
Security Audit — socket — twitter-automation