twitter-agent

SUSPICIOUS. The workflow is coherent for a Twitter/X agent, but its trust boundary is too large: the skill delegates core behavior to a vendor-specific `tw` CLI installed via same-domain remote scripts, with no clear public registry or source/release verification in the provided evidence. The review-gated posting logic reduces abuse risk, but the external black-box CLI keeps overall security risk high.