find-twitter-influencers

SUSPICIOUS. The skill's capabilities broadly match influencer discovery, and the GooseWorks CLI appears same-org and documented rather than an arbitrary third-party payload. The main concern is data-flow integrity and scope: the skill reads a local GooseWorks credential file and forwards user queries plus enriched personal/contact data through a GooseWorks proxy instead of direct official APIs, creating a broad intermediary trust dependency. No confirmed malware or hidden execution was found, but the proxy-centric architecture and raw credential-file access make this higher risk than a typical benign documentation skill.