x2c-socialposter

SUSPICIOUS. The skill's capabilities mostly match its stated social-management purpose, but its actual footprint relies on a third-party intermediary for all posting, analytics, comments, DMs, media uploads, and short-link tracking rather than direct platform APIs. That creates meaningful trust and data-flow risk, and it enables autonomous real-world actions, though there is no evidence of malware, obfuscation, credential-file theft, or hidden execution.