twitter-automation

Warn

Audited by Socket on Aug 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the purpose matches social automation, but the skill combines broad CLI execution, mediated data flow through inference.sh, transitive skill installation, and autonomous public/messaging actions. This looks more like a high-risk automation skill than clear malware; the main concerns are trust in the external CLI/platform and the ability to act publicly on the user’s behalf.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Aug 3, 2026, 03:52 PM
Package URL
pkg:socket/skills-sh/halt-catch-fire%2Fskills%2Ftwitter-automation%2F@730ab5370b839e0e339d5e7894fd8c414380529be3c42f63983e0fa6f0789061
Security Audit — socket — twitter-automation