← Back to Skills Marketplace
X
by
Oliver Drobnik
· GitHub ↗
· v1.0.0
258
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install x-api-v2
Description
Access X (Twitter) via API v2: user profiles, timelines, threads, search, bookmarks, likes, and posting. Use when asked to: (1) get user info or profile, (2)...
Usage Guidance
This skill appears to do what it claims, but review and protect the credentials it asks you to create: ~/.openclaw/x/credentials.json, oauth2.json, and tokens.json will contain your bearer token, client secrets, and OAuth tokens in plaintext. Before installing, (1) verify the skill source/trustworthiness, (2) inspect scripts/x.py yourself for unexpected network targets or obfuscation (the included code is human-readable in this bundle), (3) set strict file permissions on ~/.openclaw/x and use disk encryption if possible, and (4) configure spending limits in your X developer account to avoid unexpected billing from API usage triggered by the tool.
Capability Analysis
Type: OpenClaw Skill
Name: x-api-v2
Version: 1.0.0
The bundle is a functional X (Twitter) API v2 client implemented in pure Python using only the standard library. It correctly implements Bearer token authentication and the OAuth 2.0 PKCE flow for user-context actions like bookmarks and posting, including a local callback server (scripts/x.py). The code is well-structured, lacks obfuscation, and contains no evidence of data exfiltration, unauthorized file access, or malicious prompt injection instructions.
Capability Assessment
Purpose & Capability
Name/description (X API v2 client) aligns with what's present: a Python CLI script that performs user lookup, timelines, search, bookmarks, likes, and posting. Requested binary (python3) and on-disk credential files (~/.openclaw/x) are appropriate for this purpose; no unrelated services or permissions are requested.
Instruction Scope
SKILL.md instructs the agent to run the included Python CLI and to create credential files in ~/.openclaw/x. The code performs expected actions (HTTP calls to X API, local OAuth PKCE flow that opens a browser and runs a localhost callback server, and saves tokens to ~/.openclaw/x/tokens.json). This is within scope, but note that the OAuth flow binds to localhost:8080 and the tool stores secrets on disk unencrypted.
Install Mechanism
No install spec or external downloads; the skill is instruction-only with an included Python script (stdlib-only). Nothing is fetched from third-party URLs during install, reducing supply-chain risk.
Credentials
No environment variables are required; credentials are supplied via files (credentials.json, oauth2.json) in the user's home directory as documented. This is proportionate to the feature set, but storing bearer tokens/client secrets/tokens unencrypted in ~/.openclaw/x is a sensitive action the user should be aware of and protect (file permissions, disk encryption).
Persistence & Privilege
always is false and the skill does not request platform-wide privileges. It does persist OAuth tokens and app credentials to its own config path (~/.openclaw/x) which is normal for CLI tools; it does not modify other skills or system-wide agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install x-api-v2 - After installation, invoke the skill by name or use
/x-api-v2 - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of x-api-v2 skill.
- Access X (Twitter) via API v2 for user profiles, timelines, threads, search, bookmarks, likes, and posting tweets.
- Supports public data (via bearer token) and user-private actions (via OAuth 2.0).
- Pure Python stdlib implementation — no dependencies required.
- All commands output clean, readable text for easy integration and scripting.
- Includes rate limit and billing/costs info, advanced search operators, and troubleshooting guidance.
Metadata
Frequently Asked Questions
What is X?
Access X (Twitter) via API v2: user profiles, timelines, threads, search, bookmarks, likes, and posting. Use when asked to: (1) get user info or profile, (2)... It is an AI Agent Skill for Claude Code / OpenClaw, with 258 downloads so far.
How do I install X?
Run "/install x-api-v2" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is X free?
Yes, X is completely free (open-source). You can download, install and use it at no cost.
Which platforms does X support?
X is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created X?
It is built and maintained by Oliver Drobnik (@odrobnik); the current version is v1.0.0.
More Skills