skills/inference-sh/skills/twitter-automation/Socket

twitter-automation

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's Twitter automation purpose broadly matches its capabilities, but it relies on transitive skill installation, a remote-executed CLI installer, and credential-bearing requests through an intermediary platform rather than direct X API use. The main concern is trust expansion and autonomous public-action capability, not confirmed malware.

Confidence: 89%Severity: 76%

Audit Metadata

Analyzed At

Sep 25, 2026, 01:29 AM

Package URL

pkg:socket/skills-sh/inference-sh%2Fskills%2Ftwitter-automation%2F@192c7ab9159c3429f0e6c334363f69b682cae16e68d0680ee7641596a48fbc01