← Back to Skills Marketplace
237
Downloads
1
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install openclaw-twitter-post-engage
Description
Searches and reads X (Twitter): profiles, timelines, mentions, followers, tweet search, trends, lists, communities, and Spaces. Publishes posts, likes/unlike...
Usage Guidance
This skill uses a proxy/relay service (api.aisa.one) to perform all Twitter reads, OAuth posting, and media uploads. Before installing, understand and accept that: (1) your AISA_API_KEY authorizes the skill to call the relay on your behalf and is sent in headers and sometimes in request bodies — treat it like a sensitive credential; (2) any files you put in the OpenClaw workspace will be uploaded to the relay to publish media — do not place sensitive files there; (3) the scripts can be configured via TWITTER_RELAY_BASE_URL and other env vars (which are not listed in the manifest) — do not set those to untrusted endpoints, and prefer the default aisa.one endpoints unless you control the alternative; (4) consider using a limited/disposable AISA_API_KEY and review the included Python scripts yourself if you have concerns. If you need stronger assurance, ask the publisher for a security/privacy policy or host a vetted relay you control.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-twitter-post
Version: 2.0.3
The skill bundle provides a legitimate set of tools for interacting with Twitter/X via the AIsa API (api.aisa.one). It includes scripts for reading user data, searching tweets, managing engagements (likes/follows), and publishing content with support for media uploads and automated threading. The Python scripts (twitter_client.py, twitter_engagement_client.py, twitter_oauth_client.py) use standard libraries for HTTP requests and file handling, and the agent instructions in SKILL.md and the reference files are strictly aligned with the stated purpose of social media automation without any evidence of malicious intent or data exfiltration.
Capability Tags
Capability Assessment
Purpose & Capability
The name/description (Twitter/X read, monitor, post, engage) aligns with the included scripts and workflows which call aisa.one relay endpoints; requiring curl and python3 is reasonable. The design relies on a single third-party API key (AISA_API_KEY) and a relay service rather than direct Twitter credentials, which is coherent for a proxy-based implementation.
Instruction Scope
Runtime instructions and the Python clients instruct the agent to upload local workspace attachments and publish posts via api.aisa.one. That means user-provided media and content are transmitted to a third-party relay (aisa.one). The code also spreads the AISA_API_KEY into POST bodies (body.setdefault('aisa_api_key', self.api_key)) in addition to the Authorization header, increasing exposure of the key. Scripts allow overriding the relay base URL via TWITTER_RELAY_BASE_URL (not declared), which could redirect uploads/credentials to another host if set.
Install Mechanism
No external installers or downloaded archives; the skill is distributed as Python scripts and docs. There is no install step that fetches code from arbitrary URLs. Execution requires python3 and curl already present.
Credentials
The declared required env var is only AISA_API_KEY (primaryEnv). However the code reads additional environment variables (e.g., TWITTER_RELAY_BASE_URL, TWITTER_RELAY_TIMEOUT) not listed in requires.env or primaryEnv. The single AISA_API_KEY is powerful for this skill (authorizes many read and relay actions) and is placed in request bodies by the client code, increasing the risk of accidental disclosure. The skill does not require direct Twitter credentials (by design), but you must trust the relay operator with OAuth flows and uploaded media.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges in the manifest. It does not modify other skills or system settings. Autonomous invocation is allowed (default) but not an additional flagged privilege here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-twitter-post-engage - After installation, invoke the skill by name or use
/openclaw-twitter-post-engage - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.3
Added support for interactive Twitter/X actions (like, unlike, follow, unfollow) via new workflow files.
- Introduced `references/engage_twitter.md` to document engagement actions.
- Added `scripts/twitter_engagement_client.py` for engagement via command line.
- Updated SKILL.md to reflect new interactive capabilities and OAuth requirements for actions.
- Description now highlights support for like/unlike/follow/unfollow workflows.
v2.0.2
**Major update: Posting workflows and OAuth for Twitter/X moved to dedicated documentation and scripts.**
- Added `references/post_twitter.md` as the source of truth for all publishing and OAuth-related workflows.
- Introduced `scripts/twitter_oauth_client.py` for handling OAuth and posting to Twitter/X.
- Posting logic and agent instructions were removed from SKILL.md and are now referenced externally.
- SKILL.md is streamlined, focusing on read operations and core API usage, with clear directions for posting.
v2.0.1
No user-visible changes; documentation updated only.
- Clarified authentication for posting: now requires both Authorization header and aisa_api_key in POST requests.
- Expanded posting options to include quote and reply types, with new fields for quote_tweet_id and in_reply_to_tweet_id.
- Updated agent instructions with default threading behavior for quote/reply post types.
- No code changes; SKILL.md documentation improvements only.
v1.0.0
**Major update: Expanded read coverage, OAuth-based posting, and improved security—no passwords or proxy logins required.**
- Adds support for searching, reading profiles, timelines, mentions, followers, tweet search, trends, lists, communities, and Spaces on Twitter/X.
- Posting now requires user OAuth via browser instead of password/cookie login, increasing security.
- Users no longer need to share Twitter account passwords or use risky proxy/cookie flows for posting.
- Expanded API reference and detailed endpoint examples provided for all major Twitter/X data types.
- Updated agent instructions to prefer OAuth posting and avoid old login methods.
Metadata
Frequently Asked Questions
What is Twitter/X All-in-One — Search, Monitor & Publish Text & Media Posts?
Searches and reads X (Twitter): profiles, timelines, mentions, followers, tweet search, trends, lists, communities, and Spaces. Publishes posts, likes/unlike... It is an AI Agent Skill for Claude Code / OpenClaw, with 237 downloads so far.
How do I install Twitter/X All-in-One — Search, Monitor & Publish Text & Media Posts?
Run "/install openclaw-twitter-post-engage" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Twitter/X All-in-One — Search, Monitor & Publish Text & Media Posts free?
Yes, Twitter/X All-in-One — Search, Monitor & Publish Text & Media Posts is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Twitter/X All-in-One — Search, Monitor & Publish Text & Media Posts support?
Twitter/X All-in-One — Search, Monitor & Publish Text & Media Posts is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Twitter/X All-in-One — Search, Monitor & Publish Text & Media Posts?
It is built and maintained by AIsa (@aisadocs); the current version is v2.0.3.
More Skills