skills/lnvestor/twitr-skills/twitter-automation/Socket

twitter-automation

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill is purpose-aligned with Twitter automation and mainly uses official same-domain twitr.sh APIs, but it carries elevated risk because it enables autonomous posting/DM/follow actions on a real account, routes payment authority through a third-party MCP/client layer, processes untrusted social content, and includes transitive skill installation instructions.

Confidence: 87%Severity: 76%

Audit Metadata

Analyzed At

Aug 11, 2026, 08:40 AM

Package URL

pkg:socket/skills-sh/lnvestor%2Ftwitr-skills%2Ftwitter-automation%2F@fd78874e0d3749a44831e8e004a8a2c9ce3abc004311a00c7009adb43f30b34b