← Back to Skills Marketplace
1302
Downloads
0
Stars
3
Active Installs
1
Versions
Install in OpenClaw
/install twitter-x-api
Description
X/Twitter messaging management via API. Read tweets, post tweets, reply, send DMs, search, and view analytics. Use when the user wants to interact with X/Twi...
Usage Guidance
This skill implements a normal Twitter/X CLI, but there are a few things to check before installing or running it: (1) The skill's registry metadata does not declare that it needs API keys or a credentials file — SKILL.md and the script do require OAuth keys or a bearer token and will read ~/.config/twitter/credentials.json if present. Treat that as a real secret requirement. (2) Review the complete scripts/tweet.py source yourself (it is bundled) for any hidden network calls or unexpected file access before running; the provided snippet appears truncated, so ask for the full source if unsure. (3) Run pip install tweepy in an isolated virtualenv or sandbox and avoid running the CLI with production credentials until you've audited it. Prefer using a read-only bearer token for non-write actions where possible. (4) If you obtained this skill from an unknown source, ask the publisher to update the manifest to list required env vars/config paths and to provide provenance (homepage, source repo, maintainer). (5) If you must proceed immediately, restrict the credentials to an account with limited privileges and monitor activity for unexpected API use.
Capability Analysis
Type: OpenClaw Skill
Name: twitter-x-api
Version: 1.0.0
The skill bundle provides a legitimate interface for interacting with the Twitter/X API using the `tweepy` library. It loads API credentials from standard environment variables or a user-configured JSON file (`~/.config/twitter/credentials.json`), which is necessary for its functionality. There is no evidence of intentional malicious behavior such as data exfiltration to unauthorized third parties, installation of backdoors, or prompt injection attempts in `SKILL.md` designed to subvert the agent's instructions for harmful purposes. The ability to upload media via `scripts/tweet.py` involves reading local files, which is a legitimate feature for posting images/videos, not an indicator of malice.
Capability Assessment
Purpose & Capability
Name/description match the included code and instructions (posting, reading, DMs, search, analytics). However the registry metadata lists no required environment variables or config paths while SKILL.md and scripts/tweet.py clearly require Twitter credentials (env vars or ~/.config/twitter/credentials.json). That mismatch is incoherent and could mislead users about what secrets the skill needs.
Instruction Scope
SKILL.md instructions are narrowly scoped to Twitter/X operations (posting, reading, search, DMs, analytics) and tell the user how to provide credentials and run the CLI. The runtime instructions reference only the credentials file path (~/.config/twitter/credentials.json) and environment variables needed for OAuth/Bearer tokens, which is appropriate for this purpose.
Install Mechanism
No automated install spec is provided (instruction-only), which minimizes automatic disk writes. The SKILL.md instructs users to run 'pip install tweepy' — a normal and expected dependency, but it does cause code to be pulled from PyPI at install time. The skill includes a bundled Python script that will be executed by the user/agent when invoked.
Credentials
The SKILL.md (and tweet.py) require OAuth credentials and/or a bearer token — appropriate for Twitter integration — but the registry metadata declares none. This mismatch is concerning because users may not realize the skill will read secrets from env vars or the home config file; required secrets are proportionate to the task but were not declared in the manifest.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does read/write only its own configuration path (~/.config/twitter/credentials.json) for credentials as documented. There is no indication it modifies other skills or system-wide agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install twitter-x-api - After installation, invoke the skill by name or use
/twitter-x-api - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release - post tweets, threads, replies, DMs, search, and analytics via X API v2
Metadata
Frequently Asked Questions
What is Twitter/X API?
X/Twitter messaging management via API. Read tweets, post tweets, reply, send DMs, search, and view analytics. Use when the user wants to interact with X/Twi... It is an AI Agent Skill for Claude Code / OpenClaw, with 1302 downloads so far.
How do I install Twitter/X API?
Run "/install twitter-x-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Twitter/X API free?
Yes, Twitter/X API is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Twitter/X API support?
Twitter/X API is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Twitter/X API?
It is built and maintained by klemenska (@klemenska); the current version is v1.0.0.
More Skills