Can we get something like this that doesn't involve giving Twitter OAuth to some unknown third party?
That being said I don't think this app is going to do anything malicious.
Well, often this is not easy. I've tried to audit some extensions recently but a vast majority of non-open-source extensions are minified and heavily obfuscated. Unless you invest a lot of time, it's not easy to audit the code these days.