← Back to Skills Marketplace
X Api
by
lobstergeneralintelligence
· GitHub ↗
· v0.1.0
7849
Downloads
45
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install x-api
Description
Post to X (Twitter) using the official API with OAuth 1.0a. Use when you need to tweet, post updates, or publish content. Bypasses rate limits and bot detection that affect cookie-based approaches like bird CLI.
Usage Guidance
Install only if you want Codex or your agent workflow to be able to post from your X account. Review tweet text before running the command, avoid posting secrets or private information, protect and restrict the X API token file, remove unexpected .x-api.json files from project directories, and consider pinning the npm dependency for reproducible installs.
Capability Analysis
Type: OpenClaw Skill
Name: x-api
Version: 0.1.0
The OpenClaw AgentSkills skill bundle for 'x-api' is benign. Its stated purpose is to post to X (Twitter) using the official API. The `SKILL.md` and `scripts/x-post.mjs` clearly outline the need for X API credentials, which are loaded from environment variables or a designated secrets file (`~/.clawdbot/secrets/x-api.json`). The core script uses the legitimate `twitter-api-v2` library to interact with the X API. There is no evidence of data exfiltration beyond the intended API calls, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or suspicious dependencies.
Capability Assessment
Purpose & Capability
The purpose is coherent and disclosed: posting tweets through the official X API with OAuth credentials. This is account-affecting and may publish content publicly, but that capability matches the stated purpose.
Instruction Scope
Usage examples invoke a direct post command, and the script immediately calls the X API with the provided text. There is no hidden behavior, but users should treat execution as final because there is no preview or confirmation step in the script.
Install Mechanism
Installation uses npm and the purpose-aligned twitter-api-v2 dependency. The dependency is specified with a caret range and no lockfile is included, which is a supply-chain hygiene issue rather than evidence of malicious behavior.
Credentials
Write-capable X API credentials are proportionate for posting. The script reads credentials from environment variables, ~/.clawdbot/secrets/x-api.json, or an undocumented current-directory .x-api.json fallback, so users should check which account credentials are being used.
Persistence & Privilege
No background service, autorun persistence, destructive local mutation, or unrelated privilege escalation was found. Local long-lived token storage is documented for the intended API use.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install x-api - After installation, invoke the skill by name or use
/x-api - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
- Initial release of x-api: post tweets to X (Twitter) using the official API with OAuth 1.0a.
- Bypasses rate limits and bot detection—more reliable than cookie-based CLI tools.
- Clear setup instructions for obtaining and configuring API credentials.
- Supports multi-line tweet posts and returns the tweet URL on success.
- Specifies API usage limits, troubleshooting steps, and distinguishes use cases vs. the bird CLI for reading.
Metadata
Frequently Asked Questions
What is X Api?
Post to X (Twitter) using the official API with OAuth 1.0a. Use when you need to tweet, post updates, or publish content. Bypasses rate limits and bot detection that affect cookie-based approaches like bird CLI. It is an AI Agent Skill for Claude Code / OpenClaw, with 7849 downloads so far.
How do I install X Api?
Run "/install x-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is X Api free?
Yes, X Api is completely free (open-source). You can download, install and use it at no cost.
Which platforms does X Api support?
X Api is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created X Api?
It is built and maintained by lobstergeneralintelligence (@lobstergeneralintelligence); the current version is v0.1.0.
More Skills