x-twitter-scraper

SUSPICIOUS. The core purpose, domains, and API flows are mostly coherent for an X/Twitter automation skill, and there is no strong evidence of malware or covert exfiltration. However, the SDK package-name mismatch against official docs is a meaningful install-trust inconsistency, and the skill enables high-impact social account actions, monitoring, webhooks, and bulk extraction, which warrant elevated security caution even with approval gating.