twitter-automation

Warn

Audited by Socket on Jun 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities fit its stated purpose, and the installer appears to be same-org official rather than an unrelated payload. However, it combines pipe-to-shell installation, third-party platform mediation of X credentials/actions, autonomous public-posting and messaging abilities, and transitive skill installation. This looks coherent but high-trust and medium risk rather than benign.

Confidence: 88%Severity: 62%
Audit Metadata
Analyzed At
Jun 18, 2026, 04:31 AM
Package URL
pkg:socket/skills-sh/J-StaR-Films-Studios%2FVibeCode-Protocol-Suite%2Ftwitter-automation%2F@e9e87355fb7a77c8dd240405ea00e647f6429d3c6949d675a9b3813756fae636
Security Audit — socket — twitter-automation