twitterapi-io

SUSPICIOUS: The stated read-only Twitter API purpose is coherent, but trust in execution is weak because the skill depends on unverifiable local scripts/repo provenance and forwards an API key to that code. No overt exfiltration endpoint or posting behavior is shown, yet the unseen CLI receiving credentials pushes this into high security risk rather than benign.