twitter-monitor

SUSPICIOUS: the workflow is mostly aligned with its stated monitoring purpose, but it routes credentials and data through non-official third-party services. The biggest concerns are TWITTER_API_KEY use with twitterapi.io and optional Feishu sync through an unofficial-seeming feishu-cli, especially if installed via raw-script methods. No direct malware, stealth, or prompt-exfiltration behavior is shown, but the trust and credential-forwarding footprint is larger than a minimal Twitter export skill.