← Back to Skills Marketplace
icepopma

Twitter Content Generator

by icepopma · GitHub ↗ · v1.0.9
cross-platform ⚠ suspicious
371
Downloads
0
Stars
2
Active Installs
11
Versions
Install in OpenClaw
/install twitter-content-generator
Description
AI-powered Twitter/X content generator. Generate engaging tweets, threads, and content strategies using Sloan agent.
Usage Guidance
This skill will generate tweets but also charges a small fee via skillpay.me. Important things to check before installing or using it: - The code contains a hard-coded merchant key; if you do not provide SKILLPAY_MERCHANT_KEY, payments may go to the embedded key (likely the publisher). Set SKILLPAY_MERCHANT_KEY to your own merchant key before using the skill if you expect payments to go to your account. - The README and code contain contradictory statements about whether payments are automatic or require your key — do not assume payments go to your account without verifying the merchant_key value. - Consider running the skill in test mode (--test) first to avoid charges and confirm behavior. - Inspect package-lock.json: many dependencies are resolved from a non-standard mirror (mirrors.tencentyun.com). If you will install/run this code, prefer using official registries or re-resolving dependencies from trusted sources. - If you are not comfortable, fork or obtain the source, remove the embedded merchant key, and/or replace payment calls with a version that requires explicit configuration of your merchant key before any network charge is attempted. - Low-risk mitigation: run the included tests locally, verify that processPayment requires your key, and monitor network calls (e.g., with a proxy) when you first run the skill.
Capability Analysis
Type: OpenClaw Skill Name: twitter-content-generator Version: 1.0.9 The skill is a legitimate Twitter content generator that uses the OpenClaw 'Sloan' agent to produce tweets and threads. It utilizes a pay-per-use monetization model via the skillpay.me API, which is transparently documented in the SKILL.md and README.md files. While it contains a hardcoded merchant key (index.js) to facilitate default payments to the author, this behavior is explicitly mentioned in the documentation and does not constitute credential theft or exfiltration. The use of child_process.spawn to call the openclaw CLI is implemented safely with argument arrays, minimizing shell injection risks.
Capability Assessment
Purpose & Capability
The skill's stated purpose (generate tweets/threads via the Sloan agent) matches the code that spawns the OpenClaw agent and falls back to a local gateway. However, the package also implements pay-per-use billing and includes a hard-coded merchant key by default. While payment handling is plausibly part of a paid skill, embedding a merchant key that causes payments to go to the publisher by default contradicts parts of the README/SKILL.md and is disproportionate without clear user consent.
Instruction Scope
Runtime instructions and code limit operations to: (1) invoking the local 'openclaw' CLI to run the 'sloan' agent, (2) falling back to a local gateway HTTP call, and (3) calling skillpay.me to charge for usage. The instructions do not read arbitrary user files or unrelated environment variables. This scope is coherent with content generation plus payment handling, but the payment behavior needs scrutiny (see environment_proportionality).
Install Mechanism
No install spec is provided (instruction-only skill), which is lower risk. However, the package includes source files and a package-lock.json that resolves many dependencies from a non-standard registry (mirrors.tencentyun.com). Using an alternate/untrusted registry increases supply-chain risk and should be reviewed.
Credentials
Declared environment vars are optional (SKILLPAY_MERCHANT_KEY, OPENCLAW_GATEWAY_TOKEN). The code contains a hard-coded merchant key as a default (sk_91fff75a...), meaning if the user does not set SKILLPAY_MERCHANT_KEY, payments will be sent using that embedded key (likely to the publisher). Documentation is inconsistent: README sometimes claims 'embedded merchant key, no setup required' and elsewhere instructs users to set their own key. Embedding a secret credential in source code and defaulting to it is disproportionate and potentially deceptive.
Persistence & Privilege
The skill does not request elevated platform privileges. always is false, no special persistence or system-wide configuration changes are requested. The skill spawns a local 'openclaw' binary and performs normal HTTP calls for fallback and payments; that behavior is expected for its purpose.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install twitter-content-generator
  3. After installation, invoke the skill by name or use /twitter-content-generator
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.9
Security fix: Move merchant_key to code, remove from SKILL.md to avoid false positive
v1.0.8
Fix: Add merchant_key, clarify payment goes to publisher
v1.0.7
Clarify SKILLPAY_MERCHANT_KEY requirement in documentation
v1.0.6
Add merchant key for payments
v1.1.0
**Merchant key requirement & payment flow update** - Now requires you to set your own `SKILLPAY_MERCHANT_KEY` environment variable. - Payments now go to your own SkillPay merchant account instead of the skill publisher. - SKILL.md updated with clarified environment variable instructions and requirements for payment setup. - No changes to usage or command options.
v1.0.5
- Added documentation for new environment variables (`SKILLPAY_MERCHANT_KEY`, `OPENCLAW_GATEWAY_TOKEN`) in SKILL.md. - No functional changes to features or options. - Updated documentation to clarify optional configuration for payments and gateway auth.
v1.0.4
- Updated requirements section in documentation to mention OpenClaw Gateway and embedded merchant key for payments. - No changes to product features or pricing. - Documentation improvements for clarity.
v1.0.3
- Improved and expanded Skill documentation for clarity and usability. - Updated feature list: clarified AI capabilities, listed supported styles, and customization options. - Added detailed usage examples and option descriptions. - Updated support and contact information. - Removed references to scheduling, analytics, and free tier.
v1.0.2
- Updated package.json for version 1.0.2. - No changes to documentation or feature set in SKILL.md.
v1.0.1
- Updated version to 1.0.1. - Minor documentation formatting and metadata updates. - No functional changes to features or usage.
v1.0.0
Initial release of Twitter Content Generator: - Generate engaging tweets, threads, and content strategies with AI. - Analyze trending topics and hashtags for relevant content. - Schedule posts and track engagement with built-in analytics. - Simple pay-per-use pricing with a free tier for up to 10 generations. - Easy configuration for style, length, hashtags, emojis, and language. - Integrates with OpenClaw (Sloan agent) and supports SkillPay payments.
Metadata
Slug twitter-content-generator
Version 1.0.9
License
All-time Installs 2
Active Installs 2
Total Versions 11
Frequently Asked Questions

What is Twitter Content Generator?

AI-powered Twitter/X content generator. Generate engaging tweets, threads, and content strategies using Sloan agent. It is an AI Agent Skill for Claude Code / OpenClaw, with 371 downloads so far.

How do I install Twitter Content Generator?

Run "/install twitter-content-generator" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Twitter Content Generator free?

Yes, Twitter Content Generator is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Twitter Content Generator support?

Twitter Content Generator is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Twitter Content Generator?

It is built and maintained by icepopma (@icepopma); the current version is v1.0.9.

💬 Comments