twitter-cultivate

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's Twitter-analysis purpose is coherent, but its trust model is not. It asks users to extract live X session cookies and pass them to third-party prerelease code from a different publisher, plus it references a non-official shadowban site. This is not confirmed malware, but the credential handling and dependency trust are high enough to treat it as a significant security risk.

Confidence: 91%Severity: 76%
Audit Metadata
Analyzed At
Oct 21, 2026, 03:43 AM
Package URL
pkg:socket/skills-sh/phy041%2Fclaude-skill-twitter%2Ftwitter-cultivate%2F@1d73d9901a9d55a138fed19cbf677b3a9c3f06fb34e4b0da8684c1dc05f997d2