twitter-GTM-find-Skill

SUSPICIOUS: The core purpose and capabilities mostly align, and the named services are real, but the skill expands trust through optional third-party Xquik plugins that receive API keys and mediate Twitter/X access outside official APIs. The bundled npm-based scripts are not directly reviewable here, so dependency provenance is only partially verifiable. This looks more like a legitimate but trust-expanding workflow than malware.