he4rt-twitter-engagement-tracker

SUSPICIOUS: The skill’s core behavior is coherent for a Twitter engagement-tracking extension, and the flagged scanner items are benign documentation artifacts. Risk comes from the passive interception of social-graph data and the optional forwarding of captured data and API keys to unverified third-party heartdevs endpoints, which broadens data flow beyond local export.