Is etherlect/twit-mcp safe?
Yes. etherlect/twit-mcp is safe to install. Oathe's behavioral security audit gave the twit-mcp skill by etherlect a trust score of 91/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/etherlect/twit-mcp
Is etherlect/twit-mcp safe to install?
This skill provides legitimate Twitter/X data access through a micropayment system. The main security consideration is the requirement for a wallet private key, which is clearly documented and necessary for the payment functionality. No malicious behavior or code execution risks were detected.
What security issues were found in etherlect/twit-mcp?
Category Scores
Findings (2)
MEDIUM Wallet private key requirement -20 ▶
The skill requires access to a wallet private key via WALLET_PRIVATE_KEY environment variable for cryptocurrency payments. While documented and necessary for functionality, this creates exposure risk if the external API is compromised.
LOW Micropayment financial risk -15 ▶
The skill automatically charges $0.0025-$0.01 USDC per API call, which could result in unexpected costs with heavy usage. Users should monitor usage to avoid excessive charges.
Should I install etherlect/twit-mcp?
Oathe's verdict for etherlect/twit-mcp is SAFE with a trust score of 91/100. Recommendation: Install with caution.