trend-discovery
Warn
Audited by Socket on Sep 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is coherent, but the trust model is not: the skill installs a CLI with unclear official provenance and asks the user to supply raw X/Twitter session cookies to it. That credential forwarding risk is disproportionate enough to classify the skill as suspicious rather than benign, even though the rest of the workflow uses ordinary public trend sources.
Confidence: 86%Severity: 82%
Audit Metadata