x-manager

SUSPICIOUS: The skill’s capabilities mostly match its stated purpose and there is no obvious third-party credential proxy or install-chain abuse, but it stores raw X credentials in local JSON files and supports autonomous public posting/reply behavior. Main risk is secret handling and real-world action autonomy rather than confirmed malware.