Twitter/X Automation

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose and capabilities are broadly aligned for a social-media automation skill, but the operational trust boundary is weak: core actions appear to rely on a third-party MCP backend not clearly operated by the publisher, with likely credential forwarding and autonomous public-posting/DM capability. This is not confirmed malware, but it is a high-risk automation skill with supply-chain and account-control concerns.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Oct 22, 2026, 12:17 AM
Package URL
pkg:socket/skills-sh/claude-office-skills%2Fskills%2Ftwitterx-automation%2F@cd907cb1a7b910afd8acfeb943b8f1b01497f47e29bed5276844b49d1b3f6fa1