twitter-profile-lookup

The skill’s purpose is narrow and plausible, but its actual trust boundary is unclear because it delegates execution to another skill and may route requests through GooseWorks rather than a purely first-party ScrapeCreators path. This is not confirmed malware, but the proxy/transitive-runtime design is inconsistent enough to classify as suspicious with medium security risk.