content-posting

SUSPICIOUS. The skill matches its stated purpose and shows no obvious credential theft or external exfiltration, but it enables high-impact autonomous posting/reply behavior through unofficial browser-session automation on x.com. Main risk is account misuse and unintended public actions, not malware or supply-chain compromise.