oathe
Oathe Security Badge

Is minilozio/tweet-composer-skill safe?

Yes. minilozio/tweet-composer-skill is safe to install. Oathe's behavioral security audit gave the tweet-composer-skill skill by minilozio a trust score of 95/100 with 1 finding, none critical or high. Report updated

https://github.com/minilozio/tweet-composer-skill

95
SAFE

Is minilozio/tweet-composer-skill safe to install?

This skill provides educational documentation about X's tweet ranking algorithm and appears to be legitimate. It contains only markdown documentation files with no executable code, and shows normal installation behavior with no actual data exfiltration detected.

What security issues were found in minilozio/tweet-composer-skill?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 88/100 · 25%
Code Execution 100/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 95/100 · 5%

Findings (1)

LOW Filesystem access to sensitive file paths detected -12 ▶

Monitoring detected access to canary files including .env, SSH keys, and cloud credentials. However, this appears to be from monitoring processes rather than the skill itself, as the skill contains only markdown documentation files and canary integrity was maintained.

Should I install minilozio/tweet-composer-skill?

Oathe's verdict for minilozio/tweet-composer-skill is SAFE with a trust score of 95/100. Recommendation: Install.