x-api

SUSPICIOUS. The skill’s purpose and declared X API usage are coherent, and its confirmation gate helps constrain public posting. However, it routes highly sensitive X credentials into a required local executable script whose implementation and provenance are not provided, making the main trust boundary opaque and elevating supply-chain and credential-forwarding risk.