Creator Watch
Security checks across malware telemetry and agentic risk
Overview
The skill's described purpose (batch-scraping Twitter/X and importing to a database) matches its instructions, but it omits and under-specifies critical operational details — notably credentials and the scraper/db code — which is a practical and security concern.
This skill tells an agent how to run scrapers and import data to a database, but it omits the scraper/import code and doesn't say how authentication will be handled. Before installing, verify the following: 1) Obtain and inspect the actual scraper and db_import scripts referenced (do not run unknown code). 2) Confirm exactly what credentials are required (Twitter API keys or session cookies, DB connection strings) and where they will be stored; never provide credentials until you've audited the code. 3) Consider legal/ToS and privacy implications of scraping Twitter/X content and rate limits. 4) Run any code in an isolated environment (container or VM) with limited network access and no sensitive credentials. 5) If you plan to allow autonomous invocation, restrict it until you validate the workflow and data flows. If the publisher cannot provide the missing code and a clear list of required env vars and data retention policies, treat the skill as incomplete and do not install it on systems holding sensitive credentials.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings