← Back to Skills Marketplace
674
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install kiro-x-publisher
Description
Discover hot topics on X, enrich tweets one-by-one, score and summarize signals, generate one tweet draft, and optionally publish on schedule.
README (SKILL.md)
Kiro X Hot Publisher
Plugin producer: kiroai.io
End-to-end X workflow for Kiro:
- Discover trending tweets from X API
- Enrich each candidate via FxTwitter (full text/article support)
- Score and rank (engagement + freshness)
- Summarize key signals
- Generate exactly one tweet draft
- Optionally publish via X API (OAuth 1.0a)
Files
scripts/x_hot_pipeline.pyexamples/cron_command.txt
Required env vars
Search:
X_BEARER_TOKEN(recommended)
Publish (optional, only when --post):
X_API_KEYX_API_SECRETX_ACCESS_TOKENX_ACCESS_TOKEN_SECRET
Quick start
python3 skills/kiro-x-hot-publisher/scripts/install_and_init.py
python3 skills/kiro-x-hot-publisher/scripts/x_hot_pipeline.py \
--queries "AI,OpenAI,DeepSeek,Claude,Gemini" \
--batch-size 10
Post directly:
python3 skills/kiro-x-hot-publisher/scripts/x_hot_pipeline.py \
--queries "AI,OpenAI,DeepSeek" \
--batch-size 10 \
--post
Output
Default output folder: ./outputs/x-hot/
Generated files:
latest.json: full structured resultlatest.txt: plain-text briefing + final tweet draft
Notes
- This workflow is designed for public tweets only.
- FxTwitter is a third-party dependency for enrichment; if unavailable, base X data is still used.
- Keep
--batch-sizesmall initially (recommended10).
Changelog
- 1.1.0: Security hardening for
scripts/setup_cron.sh(input validation and command construction safeguards).
Usage Guidance
This skill appears to do what it says: it searches X, optionally enriches via FxTwitter, ranks items, drafts a single tweet, and can post if you supply OAuth keys. Before installing: (1) If you do not want it to post, do not provide the OAuth keys (X_API_KEY, X_API_SECRET, X_ACCESS_TOKEN, X_ACCESS_TOKEN_SECRET) — only X_BEARER_TOKEN is needed for search. Note the registry metadata currently lists all keys as required, so confirm the platform won't force you to supply them. (2) The setup cron script invokes openclaw.mjs via a Node binary; ensure node is available or skip the cron setup. (3) Enrichment uses api.fxtwitter.com (third party) — tweets/URLs sent to that endpoint may be seen by that service; review privacy implications. (4) The scripts write a .env.template to a local skill workspace; place and protect any real credentials you add. (5) Test in search-only mode first (no --post) and review outputs before enabling scheduled posting. If you want stronger assurance, request confirmation from the publisher (kiroai.io) about why registry metadata requires all OAuth env vars and whether cron setup requires node.
Capability Analysis
Type: OpenClaw Skill
Name: kiro-x-publisher
Version: 1.1.0
This skill is classified as suspicious due to its inherent high-risk capabilities, specifically the ability to post tweets to X (Twitter) using OAuth 1.0a credentials, as implemented in `scripts/x_hot_pipeline.py` and scheduled by `scripts/setup_cron.sh`. While this functionality is explicitly stated as the skill's purpose and the `setup_cron.sh` script includes robust input validation and command construction safeguards against shell injection, the act of posting to a social media platform is a significant risky capability. Additionally, the skill relies on a third-party service (FxTwitter) for content enrichment, introducing an external dependency risk. There is no evidence of intentional malicious behavior such as unauthorized data exfiltration, backdoor installation, or prompt injection attempts against the agent.
Capability Assessment
Purpose & Capability
Name/description match the included code: search via X API, enrich via FxTwitter, score/summarize, draft one tweet, and optionally post via OAuth 1.0a. However, registry metadata lists all OAuth keys as required even though the SKILL.md and scripts indicate posting is optional (search only needs X_BEARER_TOKEN). Also setup_cron.sh invokes a Node binary (openclaw.mjs) but the declared required binaries list only python3.
Instruction Scope
SKILL.md directs running included Python scripts; the code only uses X API and fxTwitter for enrichment and writes outputs to ./outputs/x-hot/. It does not read arbitrary system files. The enrichment step sends tweet URLs/content to api.fxtwitter.com — a third-party endpoint mentioned in the docs. The cron installer runs openclaw.mjs (via node) to register jobs, which is reasonable but not declared in required binaries.
Install Mechanism
There is no external download/install step; the package is instruction-and-script based with Python files included. No archive downloads or execution of remote code are performed by the provided scripts.
Credentials
The skill requires X API credentials to post and a bearer token to search. This is proportional to functionality, but the registry declares all five X_* env vars as required while the documentation correctly marks four of them as optional (only needed when --post). Confirm whether the platform will require you to provide all keys or allows search-only operation with only X_BEARER_TOKEN.
Persistence & Privilege
always is false and the skill does not request elevated or platform-wide persistent privileges. setup_cron.sh can register a scheduled job via openclaw.mjs (uses an OpenClaw CLI), which is a normal installer behavior and scoped to scheduling this skill's run.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install kiro-x-publisher - After installation, invoke the skill by name or use
/kiro-x-publisher - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
- Renamed the skill to "kiro-x-hot-publisher".
- Added `scripts/install_and_init.py` for improved setup and initialization.
- Removed `README.md`.
- Updated documentation: improved quick start instructions, now referencing the new script.
- Minor metadata and naming updates.
v1.0.0
Initial release: X trend discovery, scoring, draft generation, optional auto-posting.
Metadata
Frequently Asked Questions
What is Kiro X Publisher?
Discover hot topics on X, enrich tweets one-by-one, score and summarize signals, generate one tweet draft, and optionally publish on schedule. It is an AI Agent Skill for Claude Code / OpenClaw, with 674 downloads so far.
How do I install Kiro X Publisher?
Run "/install kiro-x-publisher" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Kiro X Publisher free?
Yes, Kiro X Publisher is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Kiro X Publisher support?
Kiro X Publisher is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Kiro X Publisher?
It is built and maintained by Xinjin (@vmining); the current version is v1.1.0.
More Skills