← Back to Skills Marketplace
153
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install twexapi-cli
Description
Use this skill when the task should be done through the twexapi command-line client, including installing the CLI, configuring app or profile auth, previewin...
Usage Guidance
This skill appears to do what it says: it's a CLI for twexapi and needs an API key and/or cookie/auth_token to make requests. Before installing: 1) Verify you trust the npm package/source (npm install -g runs third-party code). 2) Be aware that credentials (API key, cookies, auth_token, ct0) are stored as plain JSON by default at ~/.twexapi/config.json — use --config-dir or TWEXAPI_CONFIG_DIR to isolate or avoid leaving secrets on shared machines/CI. 3) Prefer --dry-run before performing write actions and avoid pasting long-lived tokens into shared logs. 4) If you need higher assurance, inspect the included source files (they're present here) or run the CLI from a local checkout rather than installing globally.
Capability Analysis
Type: OpenClaw Skill
Name: twexapi-cli
Version: 0.1.1
The twexapi-cli skill is a standard command-line interface for interacting with the twexapi.io service. It manages API keys and session cookies, storing them in a local configuration file (~/.twexapi/config.json) and providing convenience commands for Twitter-like actions (tweeting, searching, following). The code follows good security practices for a CLI, such as masking secrets in output and providing a --dry-run mode. The instructions in SKILL.md are safety-conscious, advising the AI agent to use dry-runs and verify credentials before execution. No evidence of data exfiltration to unauthorized domains, malicious execution, or obfuscation was found.
Capability Assessment
Purpose & Capability
Name/description match the included code and SKILL.md: this is a command-line client for twexapi endpoints, with support for saved app configs and profiles, dry-run previews, and both convenience commands and raw path requests. The code and instructions only request the API key, cookies, auth_token, and an optional config-dir/base-url — all relevant to the stated purpose.
Instruction Scope
SKILL.md and the code limit actions to installing/running the CLI, building HTTP requests to the twexapi base URL, and reading/writing the CLI config (default ~/.twexapi/config.json). There are no instructions to scan unrelated system files, exfiltrate arbitrary data, or call unexpected external endpoints beyond the configured base URL. The CLI warns about paths that may contain the auth_token in URLs and recommends dry-run before write actions.
Install Mechanism
No custom install spec is embedded; SKILL.md recommends installing the published npm package or running the local node entrypoint. This is a common, low-risk install pattern. Users should still verify the npm package's origin before installing globally.
Credentials
The skill uses TWEXAPI_KEY, TWEXAPI_BASE_URL, and TWEXAPI_CONFIG_DIR (all relevant to a CLI that calls an API). Registry metadata did not declare required env vars, but the code and README document them. Important: saved app configs and profiles may store API keys, cookies, auth_token, and ct0 in plain JSON at ~/.twexapi/config.json (or a custom config-dir). This is expected for this tool but increases risk on shared machines or CI unless an isolated config-dir is used.
Persistence & Privilege
The skill does persist its own config under a dedicated directory and will write config files (saveConfig). It does not request always:true, does not alter other skills, and does not require system-wide privileges. Use of an isolated --config-dir is supported and recommended for safer testing.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install twexapi-cli - After installation, invoke the skill by name or use
/twexapi-cli - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
twexapi-cli 0.1.1
- Expanded authentication docs: now documents support for `TWEXAPI_BASE_URL`, `TWEXAPI_CONFIG_DIR`, persistent config in `~/.twexapi/config.json`, and credential isolation on shared machines.
- Clarified config and credential storage, including how saved apps and profiles are handled.
- Noted that `auth cookie` includes the `auth_token` in request paths and should be treated carefully in logs.
- Documentation improvements throughout for clarity and explicit safety recommendations.
- No changes to CLI command behavior—documentation updates only.
v0.1.0
Initial release of twexapi-cli skill.
- Provides guidance for installing, configuring, and using the twexapi CLI.
- Covers supported authentication flows for both read and write operations.
- Details command selection between convenience commands and raw path usage.
- Emphasizes safety rules including the use of `--dry-run` for write operations.
- Outlines recommended testing and configuration verification steps.
Metadata
Frequently Asked Questions
What is Twexapi CLI?
Use this skill when the task should be done through the twexapi command-line client, including installing the CLI, configuring app or profile auth, previewin... It is an AI Agent Skill for Claude Code / OpenClaw, with 153 downloads so far.
How do I install Twexapi CLI?
Run "/install twexapi-cli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Twexapi CLI free?
Yes, Twexapi CLI is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Twexapi CLI support?
Twexapi CLI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Twexapi CLI?
It is built and maintained by yeahjjyy (@yeahjjyy); the current version is v0.1.1.
More Skills