Security audit
Xquik
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed guide for a powerful X/Twitter automation plugin with clear approval, credential, payment, and monitoring guardrails.
Install only if you trust Xquik and want an agent to help operate your X/Twitter account. Keep credentials in sensitive plugin config, pin or verify the @xquik/tweetclaw package before production use, and approve only narrowly scoped actions after checking the exact account, target, content, cost, and monitor settings.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.