twitter-poster

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill prompt explicitly embeds hardcoded Twitter API keys, consumer secrets, access tokens, and OAuth client secrets directly in the text.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). The documentation contains high-entropy, literal Twitter/X API v2 keys, consumer secrets, access tokens, token secrets, bearer tokens, and OAuth2 client secrets explicitly provided under the "Authentication" section. These are actual high-entropy credentials rather than obvious standard placeholders or generic dummy examples.