twitter-api

SUSPICIOUS. The skill’s stated purpose, required X credentials, and intended actions are broadly coherent, and Bun appears to be an official third-party runtime rather than a deceptive installer. However, the core local script that actually handles credentials and network requests is missing, so data flow and credential handling cannot be verified; combined with autonomous public posting/deletion capability, this makes the skill medium risk rather than benign.