skills/starchild-ai-agent/official-skills/x-mcp/Socket

x-mcp

Warn

Audited by Socket on Jul 3, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

BENIGN overall for purpose alignment and data flow: it uses official X endpoints and an official same-org CLI for a BYOK X integration, with no proxying or clear exfiltration. The main risk is not hidden malware but the high-impact capability it grants the agent: autonomous posting and DMs, plus local storage/refresh of OAuth tokens. Treat as a legitimate but high-trust account automation skill.

Confidence: 90%Severity: 68%

Audit Metadata

Analyzed At

Jul 3, 2026, 07:44 PM

Package URL

pkg:socket/skills-sh/Starchild-ai-agent%2Fofficial-skills%2Fx-mcp%2F@fbd8dc0fdd712630d12a794bed9ca40bc5478d163ebac154046d0770bc5be60c