twitter-automation

SUSPICIOUS: The skill’s capabilities match its stated Twitter/X automation purpose, but it relies on transitive remote skill installation and an external CLI that mediates authentication and account actions through inference.sh. The main risk is not hidden malware signals; it is the combination of supply-chain trust, credential forwarding to third-party tooling, and autonomous public-action capability.