Security audit
Security checks for vulnerabilities and agentic risk
This skill is openly for X/Twitter browsing and account actions, but it gives agents one-click instructions for visible account actions without requiring confirmation for all of them.
Install only if you want an agent to operate X/Twitter through your browser session. Treat it as write-capable: ask for read-only browsing unless you explicitly want account actions, and require a final confirmation before any post, like, repost, reply, or follow.
The skill description is broad enough to activate for many generic X/Twitter-related requests, including state-changing actions such as posting, liking, reposting, replying, and following. In an agent environment, vague activation criteria can cause the skill to be selected too readily, increasing the chance of unintended account actions or privacy-sensitive browsing without explicit user intent.
The skill includes multiple write actions—like, repost, reply, and follow—but only explicitly requires confirmation before posting. Without equivalent confirmation and warning guidance for these other actions, an agent could perform irreversible or user-visible account actions based on ambiguous prompts, causing reputation damage, accidental engagement, or unauthorized account activity.
