twitter

SUSPICIOUS. The skill is broadly aligned with its stated Twitter purpose, but it relies on a non-Zo third-party CLI that receives high-value X session cookies and can extract browser cookies. Its biggest risk is autonomous public-account actions and credential forwarding to external code, not clear malware or unrelated exfiltration.