showname

• Risk level: Low
• Analyzed: Apr 21, 2026, 2:33 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, install steps, and required credential (XAI_API_KEY) align with its stated purpose of searching X (Twitter) via the xAI Grok Responses API; nothing requests unrelated secrets or installs arbitrary remote code.

This skill appears coherent and limited to searching X via the xAI API. If you install it, only provide an xAI API key (XAI_API_KEY). Review the key's permissions in your xAI console and consider using a scoped API key for read/search if available. Note: metadata owner IDs differ between the registry and _meta.json (minor mismatch in packaging), but this is not evidence of malicious behavior.