← Back to Skills Marketplace
608
Downloads
0
Stars
1
Active Installs
6
Versions
Install in OpenClaw
/install xqueue
Description
File-based X/Twitter post scheduler. Drop tweets into day/time folders, they post automatically. No frontend, no app — your file system is the UI.
Usage Guidance
This skill appears to do exactly what it says: run the included Python scripts on a cron schedule to post files from a folder tree to X. Before installing/running: 1) protect the four X API credentials (they allow posting as your account); prefer environment variables or a secure keychain entry; 2) be aware deleteAfterPost is true by default (files are removed after posting); enable dry-run initially to verify behavior; 3) the script uses the macOS 'security' command as an optional keychain fallback and may call the local 'openclaw' CLI for notifications if available — if you don’t want that, don’t install/run the OpenClaw CLI and/or remove that notification call; 4) review cron setup and the configured xqueue path to ensure files live where you expect. Other than those operational considerations, there are no incoherent permissions, unexplained network hosts, or unexpected persistence behaviors.
Capability Analysis
Type: OpenClaw Skill
Name: xqueue
Version: 1.0.5
The xqueue skill is a legitimate file-based Twitter scheduler that manages posts via a directory structure. It includes robust logic for OAuth1 authentication, media handling, and thread management, with proactive security measures such as path traversal checks in xqueue-post.py and xqueue-setup.py. All sensitive operations, including macOS Keychain access and network calls to api.x.com, are explicitly declared and aligned with the tool's stated functionality.
Capability Assessment
Purpose & Capability
Name/description (file-based X post scheduler) match what the code and SKILL.md do: create folder structure, read .md files, post to X via OAuth1, upload media, and log actions. Required binaries (python3) and pip deps (requests, requests-oauthlib) are appropriate and expected.
Instruction Scope
SKILL.md instructs running the included scripts (setup + cron-runner). The code only reads/writes the xqueue folders, a posted.log, and a notifications.log in ~/.openclaw — all described in metadata. It accesses credentials (env or macOS keychain) which is necessary to call X APIs. There are no instructions to read arbitrary user files or exfiltrate data to unrelated endpoints.
Install Mechanism
No install spec (instruction+code only). The skill ships Python scripts and expects the user to run them; nothing is downloaded at install time and no third‑party installers or remote archives are used.
Credentials
Requested environment variables are the four standard X/Twitter OAuth credentials needed to post: X_CONSUMER_KEY, X_CONSUMER_SECRET, X_ACCESS_TOKEN, X_ACCESS_TOKEN_SECRET. The optional macOS keychain fallback uses the local 'security' utility to read credentials — consistent with the fallback behavior. No unrelated secrets or external API keys are requested.
Persistence & Privilege
Skill is not marked always:true and does not attempt to persist itself or modify other skills. It makes a best-effort notification call to the OpenClaw CLI (openclaw wake) and writes to its own notification/log files only. No elevated privileges or cross-skill config modifications are present.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install xqueue - After installation, invoke the skill by name or use
/xqueue - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.5
Cross-list sync from workspace
v1.0.4
Fixed permissions scope declaration — now accurately declares macOS Keychain and openclaw CLI access to resolve ClawHub security scanner scope mismatch
v1.0.3
Security: replaced hand-rolled OAuth 1.0a with requests-oauthlib, fixed path traversal in setup script
v1.0.2
Fix metadata format
v1.0.1
Fix security scan: declare required credentials in metadata, sanitize logFile path, remove hardcoded keychain account
v1.0.0
Initial release — file-based X/Twitter post scheduler
Metadata
Frequently Asked Questions
What is xqueue?
File-based X/Twitter post scheduler. Drop tweets into day/time folders, they post automatically. No frontend, no app — your file system is the UI. It is an AI Agent Skill for Claude Code / OpenClaw, with 608 downloads so far.
How do I install xqueue?
Run "/install xqueue" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is xqueue free?
Yes, xqueue is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does xqueue support?
xqueue is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created xqueue?
It is built and maintained by Mei Park (@meimakes); the current version is v1.0.5.
More Skills