twitter-automation

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the purpose matches social automation, but the skill combines broad CLI execution, mediated data flow through inference.sh, transitive skill installation, and autonomous public/messaging actions. This looks more like a high-risk automation skill than clear malware; the main concerns are trust in the external CLI/platform and the ability to act publicly on the user’s behalf.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Jul 23, 2026, 06:07 PM
Package URL
pkg:socket/skills-sh/magentosh%2Fskills%2Ftwitter-automation%2F@01c9056804df67c95d5cc0ae903d3cdadec66351a8c56678be5c60bba9a8ceb2
Security Audit — socket — twitter-automation