← Back to Skills Marketplace
zyliu0

xclaw

by zyliu · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
263
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install x-openclaw
Description
Extract posts from X (Twitter) timeline or profile pages with engagement metrics, media URLs, and download local copies. Use when asked to scrape, list, or a...
Usage Guidance
This skill appears to do what it says: it will navigate X pages, scrape DOM content, and save an intel markdown file plus media into ../../intel/x/media/{timestamp}. Before installing or running it, consider: (1) If your agent's browser is logged into your X account, the skill may scrape private/home-timeline content — log out or use an unauthenticated session if you don't want that. (2) The skill will write files two levels up from the execution directory—verify that path is acceptable and won't overwrite important files. (3) Scraping may violate X/Twitter terms of service or copyright; review legal/ethical implications. (4) If you need the skill to access protected data (e.g., private messages or an authenticated feed), expect to provide authentication separately; the skill does not declare credentials. If these points are acceptable, the skill is internally coherent.
Capability Analysis
Type: OpenClaw Skill Name: x-openclaw Version: 1.0.0 The x-openclaw skill (SKILL.md) is designed to scrape X (Twitter) posts and download associated media. It instructs the agent to execute shell commands (mkdir and curl) to create directories and download files based on data extracted from the web (URLs and post IDs). While the intent is aligned with the stated purpose, the use of shell commands with externally sourced, unsanitized data presents a potential shell injection vulnerability, and the broad file/network access via the shell meets the criteria for a suspicious classification.
Capability Assessment
Purpose & Capability
Name/description align with the runtime instructions: the SKILL.md describes DOM scraping of X pages, collecting engagement metrics and media, and saving results to a defined folder structure. No unrelated binaries, env vars, or installs are requested.
Instruction Scope
Instructions tell the agent to navigate a browser, run page-evaluation JS to extract posts, create folders (../../intel/x/media/...), and download media. This is expected for a scraper, but the skill implicitly reads whatever the browser session can access (including a logged-in home timeline and any session cookies) and writes files to relative paths two levels up—so there is a privacy risk if the agent is logged into a personal account or the target page contains private data.
Install Mechanism
No install spec and no code files — instruction-only. This minimizes supply-chain risk because nothing is downloaded or written at install time.
Credentials
The skill requires no environment variables or credentials, which is coherent. However, it assumes access to a browser context that may be authenticated; that implicit access to session cookies is not declared and could expose private timeline data when run.
Persistence & Privilege
always is false and there is no install-time persistence. The skill does instruct file creation within the agent workspace (or parent directories) but does not request elevated or persistent platform privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install x-openclaw
  3. After installation, invoke the skill by name or use /x-openclaw
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
**Major skill overhaul: XClaw is now a local X (Twitter) post extractor, focused on scraping and archiving.** - Removed all previous API-based intelligence, analysis, and endpoint documentation. - Eliminated all code and references related to the original intelligence features and command set. - The skill now provides one main function: extract and archive X timeline/profile posts with engagement data and local media downloads. - Supplies strict output format for scraped intel files, including post metadata, metrics, and file/folder naming conventions. - Updated usage instructions and workflows for local scraping and file management only.
Metadata
Slug x-openclaw
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is xclaw?

Extract posts from X (Twitter) timeline or profile pages with engagement metrics, media URLs, and download local copies. Use when asked to scrape, list, or a... It is an AI Agent Skill for Claude Code / OpenClaw, with 263 downloads so far.

How do I install xclaw?

Run "/install x-openclaw" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is xclaw free?

Yes, xclaw is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does xclaw support?

xclaw is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created xclaw?

It is built and maintained by zyliu (@zyliu0); the current version is v1.0.0.

💬 Comments