twitter

The skill’s purpose is coherent for a Twitter/X integration, and its official X paths (hosted MCP and xurl) are proportionate. Risk comes from mixing those with bird and smaug: deprecated third-party tools that consume browser cookies and perform account actions outside official auth flows. This is better classified as suspicious/high-risk supply-chain and credential-handling exposure rather than confirmed malware.