Bird Twitter

• Analyzed: May 11, 2026, 4:52 AM
• Findings: 1
• Version: 1.0.0
• Hash: e38a8cb5c9cfdf98e7520f98e025a27848758f1fa041a5527cfb2a9014bb461e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a transparent wrapper for the `bird` CLI tool, designed to interact with the Twitter/X API. It explicitly declares its need for `AUTH_TOKEN` and `CT0` environment variables in `SKILL.md` and `_meta.json`, and the `lib/bird-helper.sh` script validates their presence before executing the `bird` command. The script safely passes arguments using `bird "$@"`, preventing simple shell injection. There is no evidence of data exfiltration, persistence mechanisms, obfuscation, or malicious prompt injection attempts in the `SKILL.md` file. The skill's functionality aligns with its stated purpose of providing a Twitter CLI interface.