x-twitter

SUSPICIOUS: The skill’s purpose and API actions are coherent for an X/Twitter integration, and data flows go to official X/Twitter domains rather than a proxy. However, the install instructions for the core CLI are materially inconsistent with the official upstream distribution, creating avoidable supply-chain and credential-forwarding risk because the CLI receives X API credentials and can perform public-account actions and DMs.