← Back to Skills Marketplace
1369
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install xapi123123
Description
Use xapi CLI to access real-time external data — Twitter/X profiles, tweets, and timelines, crypto token prices and metadata, web search, news, and AI text p...
Usage Guidance
This skill appears to be a thin wrapper around the external xapi CLI and legitimately needs an XAPI_API_KEY and npx. Before installing or using it: (1) verify the xapi project and operator (visit https://xapi.to, inspect their docs and privacy policy); (2) prefer exporting your API key as an environment variable (XAPI_API_KEY) rather than using any automatic "register" flow that saves credentials to ~/.xapi/config.json — if you must use the file, inspect its contents and tighten permissions (chmod 600) and understand where the file is written; (3) be aware that the tool can discover and call arbitrary third‑party APIs (it can proxy requests), so avoid sending sensitive secrets or private data through it and consider a scoped or throwaway API key; (4) if you need higher assurance, ask the skill author for source code or a published package link (npm/github) and for a declared config path in the metadata (to match the README); and (5) monitor network use and audit the ~/.xapi directory after use. These clarifications would raise my confidence and could change the verdict to benign if answered satisfactorily.
Capability Analysis
Type: OpenClaw Skill
Name: xapi123123
Version: 1.0.2
The xapi skill provides an interface for an AI agent to interact with external data services (Twitter, Crypto, Search, AI) via the `npx xapi-to` CLI. It includes comprehensive instructions for the agent, handles API key configuration in `~/.xapi/config.json`, and features explicit security warnings in `SKILL.md` to prevent the agent from leaking sensitive credentials to unauthorized domains. The functionality is consistent with its stated purpose as an API gateway, and no evidence of malicious intent or obfuscation was found.
Capability Assessment
Purpose & Capability
Name/description match the instructions: the SKILL.md describes using the xapi CLI for Twitter/X, crypto, web/news search, and AI text actions. Declared runtime requirement (npx) and primary credential (XAPI_API_KEY) are consistent with a CLI that calls an external service. Minor mismatch: requires.env is empty in metadata even though a primaryEnv (XAPI_API_KEY) is declared — this is a bookkeeping inconsistency but not a major functional mismatch.
Instruction Scope
The instructions tell the agent to run npx xapi-to commands and to register or set an API key. They explicitly state the API key is saved automatically to ~/.xapi/config.json and also that XAPI_API_KEY env var may be used. The skill can discover and call arbitrary third‑party APIs (via --source api / services), which increases the risk that data could be relayed to endpoints beyond the user's immediate expectation. The SKILL.md also does not limit what data should or should not be sent to those APIs.
Install Mechanism
This is an instruction-only skill (no install spec, no code files). It uses npx to run a public CLI on-demand, which is a low-risk install model compared with downloading/extracting archives or running custom installers.
Credentials
Only one credential (XAPI_API_KEY) is declared as the primary credential, which is reasonable for a proxy/CLI to an external service. However, the SKILL.md indicates the credential will be persisted to ~/.xapi/config.json but the registry metadata lists no required config paths — this mismatch should be clarified. Consider whether you trust the service with any data you pass via the CLI.
Persistence & Privilege
The skill will cause the xapi CLI (when run) to persist the API key to ~/.xapi/config.json according to its instructions; the skill metadata did not declare any required config paths. The skill is not always:true (no global forcing), but the automatic on-disk persistence of credentials and the ability to call arbitrary third-party APIs raises persistence/privacy concerns.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install xapi123123 - After installation, invoke the skill by name or use
/xapi123123 - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- Updated all CLI usage instructions from npx @xapi-to/xapi to npx xapi-to for improved simplicity and clarity.
- Installation and setup commands now use the new xapi-to syntax everywhere.
- Expanded the API Services section to explicitly list several available third-party APIs.
- General rewording and improved consistency in reference blocks and example commands.
v1.0.1
xapi123123 1.0.1 — Major update: now uses agent-friendly xapi CLI for real-time data and external APIs.
- Transitioned from skill registration to direct CLI usage via `npx @xapi-to/xapi`.
- No code files changed; documentation completely rewritten for CLI workflow.
- Step-by-step instructions to query Twitter/X, crypto, web search, news, and AI text tools using CLI commands.
- Supports both "capability" and "api" sources with discoverable actions, all returning structured JSON.
- Documents OAuth workflow for Twitter write access.
- Advises to always inspect (`get`) action schemas before calling for parameters.
- New coverage for account management, service discovery, and third-party API access directly from the CLI.
v1.0.0
xapi v1.0.0 — Initial Release
- Adds the new xapi skill with a unified interface for over 50 third-party APIs, including Twitter, blockchain, AI services, and more, via MCP.
- Introduces agent self-registration flow, credential management, and secure API key handling.
- Provides clear instructions and guidelines for safe agent usage, security best practices, and registration reward claiming.
- Replaces previous skill (clawstead) with completely new infrastructure-focused functionality.
Metadata
Frequently Asked Questions
What is xAPI?
Use xapi CLI to access real-time external data — Twitter/X profiles, tweets, and timelines, crypto token prices and metadata, web search, news, and AI text p... It is an AI Agent Skill for Claude Code / OpenClaw, with 1369 downloads so far.
How do I install xAPI?
Run "/install xapi123123" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is xAPI free?
Yes, xAPI is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does xAPI support?
xAPI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created xAPI?
It is built and maintained by 洛冰河 (@glacier-luo); the current version is v1.0.2.
More Skills