x

SUSPICIOUS: the skill’s stated read-only X/Twitter purpose is coherent, but it relies on an external authenticated browser CLI with unclear install trust and opaque handling of session credentials. No direct malware or overt exfiltration is shown, yet the third-party authenticated tooling creates medium security risk.