fxTwitter

• Risk level: Low
• Analyzed: Feb 21, 2026, 7:42 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code and instructions match its description: it extracts a tweet ID and fetches JSON from api.fxtwitter.com with no extra privileges or unexpected behavior.

This skill simply sends a tweet URL or ID to the third‑party service api.fxtwitter.com and returns the JSON it provides. Before installing, consider whether you trust that third party with request logs (they will see the tweet IDs and the agent's outbound requests). Avoid using this skill to fetch private or sensitive content you wouldn't want logged externally. If you need stronger privacy or audited provenance, use the official API (which requires credentials) or host your own fetcher. Also verify the skill author/registry entry if provenance matters (owner is unknown).