Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Twitter/X creator research workflow that may scrape public content and update a local database, but the behavior matches its stated purpose.
Before installing, understand that using the scrape or update commands may contact Twitter/X, hit rate limits, and write records into a local database. Use it only with scripts and credentials you trust, and confirm scope before batch scraping.
The trigger list includes very broad phrases such as 'who should I follow' and 'analyze creator,' which can match ordinary conversation and cause the skill to activate outside the user's intended context. Because this skill can initiate scraping, imports, and analysis workflows, accidental invocation can lead to unintended external requests or local data changes.
The skill advertises scraping Twitter/X content and importing results into a database without an upfront warning that these actions may generate network traffic, consume resources, hit rate limits, or modify stored data. In an agent environment, users may invoke the skill expecting simple advice but instead trigger actions with operational and compliance consequences.
