← Back to Skills Marketplace

Lebevolae X Post

Name: Lebevolae X Post
Author: lebevolae

by lebevolae · GitHub ↗ · v1.0.1 · MIT-0

cross-platform ⚠ suspicious

250

Downloads

Stars

Active Installs

Versions

Install in OpenClaw

/install lebevolae-x-post

Description

Automatically post text or a single local image tweet to X/Twitter using provided developer credentials.

README (SKILL.md)

---\r \r name: Leo X Poster\r \r slug: lebevolae-x-post\r \r version: 0.1.0\r \r description: "Leo 的自定义技能：自动发推文到 X/Twitter，支持文本和图片"\r \r author: "Leo Liu (@LBevolae)"\r \r tags: [twitter, x, post, social]\r \r requirements:\r \r - TWITTER_API_KEY\r \r - TWITTER_API_SECRET\r \r - TWITTER_ACCESS_TOKEN\r \r - TWITTER_ACCESS_SECRET\r \r ---\r \r \r \r ## 功能\r \r 发推文到 X，支持纯文本或带一张本地图片。\r \r \r \r ## 使用示例\r \r leo，发推：今天天气不错！ #测试\r \r leo，发带图推文：内容xxx，图片 C:\Users\bazin\Desktop\photo.jpg\r \r \r \r ## 配置\r \r 需要 X Developer 账号的 4 个凭证（去 https://developer.twitter.com 申请 App，OAuth 1.0a read+write）。\r \r 设置为环境变量或 OpenClaw config。\r \r

Usage Guidance

Do not install or provide your primary Twitter/X credentials until the metadata mismatch is resolved. Ask the publisher why the registry lists no required env vars while SKILL.md requires four OAuth tokens. If you still want to test it: 1) create a throwaway Twitter developer app and account or use tokens with only test permissions; 2) store credentials in the platform's secure config rather than pasting them into chat; 3) restrict the agent's ability to run autonomously or require explicit confirmation before posting; and 4) verify the skill's behavior first on a test post to ensure it only posts what you expect. If the publisher cannot explain the metadata omission, treat the package as untrusted.

Capability Analysis

Type: OpenClaw Skill Name: lebevolae-x-post Version: 1.0.1 The skill bundle contains only metadata and documentation for a Twitter/X posting tool. The instructions in SKILL.md describe standard functionality for posting text and images using legitimate API credentials, and no executable code or malicious prompt-injection attempts were found in the provided files (_meta.json, SKILL.md).

Capability Assessment

⚠ Purpose & Capability

The SKILL.md clearly requires the four Twitter OAuth credentials (API key/secret and access token/secret), which is coherent with a posting-to-X capability; however the registry metadata lists no required environment variables or primary credential. That mismatch between declared metadata and the runtime instructions is a material inconsistency.

ℹ Instruction Scope

Instructions are simple and scoped to posting text or a single local image to X, and they point the agent to use local image paths and environment variables. Reading a local image file is expected for this purpose, but the skill's instructions grant the agent access to arbitrary local paths (example uses C:\Users\...\photo.jpg) so the agent could access other files if given broad file-access permissions.

✓ Install Mechanism

Instruction-only skill with no install spec or downloaded code; this minimizes supply-chain risk because nothing is written to disk or fetched at install time.

⚠ Credentials

Requesting the four OAuth credentials is proportionate to the stated function, but the registry metadata does not declare any required env vars or a primary credential. That omission could lead users to overlook that they must supply sensitive write-capable tokens, increasing risk of accidental credential exposure or misuse.

ℹ Persistence & Privilege

The skill is not force-enabled (always=false) and uses the platform default allowing autonomous invocation. That is normal, but combined with write-capable Twitter credentials it means the agent could post to X without further prompts if it invokes the skill—consider restricting invocation or using tokens for a throwaway account.

How to Use

Make sure OpenClaw is installed (local or Docker)
Run the install command in chat: /install lebevolae-x-post
After installation, invoke the skill by name or use /lebevolae-x-post
Provide required inputs per the skill's parameter spec and get structured output

Version History

v1.0.1

- Minor update to SKILL.md formatting and metadata quoting. - No functional changes to the skill itself.

v1.0.0

Initial release of Leo X Poster skill. - Post tweets to X/Twitter with text or a single local image. - Simple commands for text-only or image tweets. - Requires Twitter API keys and tokens for authentication. - Configure credentials via environment variables or OpenClaw config. - Documentation included for setup and usage examples.

Metadata

Slug lebevolae-x-post

Version 1.0.1

License MIT-0

All-time Installs 1

Active Installs 1

Total Versions 2

Frequently Asked Questions

What is Lebevolae X Post?

Automatically post text or a single local image tweet to X/Twitter using provided developer credentials. It is an AI Agent Skill for Claude Code / OpenClaw, with 250 downloads so far.

How do I install Lebevolae X Post?

Run "/install lebevolae-x-post" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Lebevolae X Post free?

Yes, Lebevolae X Post is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Lebevolae X Post support?

Lebevolae X Post is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Lebevolae X Post?

It is built and maintained by lebevolae (@lebevolae); the current version is v1.0.1.

More Skills