X Expert

智能 X (Twitter) 发布助手 - 通过对话式流程帮助用户创建、策划和发布推文内容

This skill appears consistent with its purpose, but before installing: 1) Only provide the X/Twitter credentials you trust and consider creating an app/token with limited permissions if possible; 2) Review package.json/package-lock to confirm the npm dependency (twitter-api-v2) is acceptable and run npm install in a controlled environment; 3) Be aware the scripts can post tweets directly when invoked — keep the default confirmation setting or test with a throwaway account first; 4) Optional image/search API keys are only needed if you use those features — don't set them unless required; 5) If you need stronger assurance, review the repository code locally (especially network endpoints listed in scripts) and run the skill in an isolated environment, rotating tokens afterwards if you stop using it.

Type: OpenClaw Skill Name: x-expert Version: 1.0.0 The x-expert skill bundle is a functional Twitter (X) publishing assistant that facilitates a conversational workflow for content creation and posting. The scripts (e.g., post-tweet.js, generate-image.js, collect-info.js) use standard libraries like twitter-api-v2 and interact with legitimate service endpoints (OpenAI, Exa, Brave) using environment variables for credentials. The SKILL.md instructions include a mandatory final confirmation step before posting, and no evidence of data exfiltration, malicious execution, or prompt injection was found.