x-poster

The skill aligns with its stated purpose of transforming ideas into X posts and managing replies, and it uses reasonable integration points (MCP server, Bun, workflow definitions). However, there are notable risks around autonomous posting without per-action user confirmation, credential management for MCP/API tokens, and potential data exposure through unmonitored flows. Overall, the footprint is coherent with a social-media automation tool but should be hardened with explicit per-post user approvals, strict secret handling (env-managed tokens with least privilege), clear logging redaction, and explicit data-flow diagrams to constrain what content can be posted and when. Recommend adding per-action confirmation prompts, documented credential handling policies, and access controls before deploying in production.