social-cli

SUSPICIOUS: the skill is purpose-aligned and not overtly malicious, but it enables autonomous public social actions using raw platform credentials and a local agent loop. Main concerns are real-world action automation and moderate supply-chain trust from git-clone-and-build installation, not credential harvesting or hidden exfiltration.