twitter-reader

SUSPICIOUS. The skill's purpose is coherent, and the OpenCLI install sources appear to be official same-publisher channels rather than an obvious credential-stealing proxy. However, it uses load-time pre-execution, depends on a third-party CLI plus extension that reuses the user's browser session, and its 'read-only' promise is enforced only by instructions even though the underlying tool reportedly supports write actions. This is not confirmed malware, but it carries meaningful supply-chain and trust-boundary risk.