xAI Plus

Search X/Twitter and the web, chat with Grok models (text + vision), and analyze X content using xAI's API. Use when: searching X posts/threads, web research via Grok, chatting with Grok, analyzing voice patterns, researching trends, or checking post quality. Triggers: grok, xai, search x, search twitter, x search, ask grok, grok chat, analyze voice, x trends.

This skill appears to do what it says: it needs Node and your xAI API key and will call api.x.ai endpoints. Before installing, consider: 1) Provide only a dedicated xAI API key (do not reuse unrelated secrets). 2) The scripts will try to read ~/.clawdbot/clawdbot.json to locate a key (including other skills' apiKey fields) — if that file contains unrelated secrets, consider removing them or using the XAI_API_KEY env var instead. 3) Any images you pass will be base64-encoded and sent to x.ai — don't upload sensitive images unless you trust x.ai. 4) No external downloads or unknown endpoints are present in the package. If you want extra caution, inspect the bundled scripts locally (they are plain JS) and run them in an isolated environment or with a low-privilege account.

Type: OpenClaw Skill Name: xai-plus Version: 2.0.2 The skill bundle is benign. All scripts (`.mjs` files) are Node.js applications that interact exclusively with the `api.x.ai` endpoint for search, chat, and analysis functionalities. API keys are securely read from environment variables or the `~/.clawdbot/clawdbot.json` configuration file, which is standard practice for OpenClaw skills. Image files are read locally and base64 encoded for vision API calls. The `SKILL.md` and `references/*.md` files provide clear, descriptive instructions and documentation without any evidence of prompt injection attempts against the OpenClaw agent or other malicious directives. There is no unauthorized network activity, arbitrary command execution, or data exfiltration to external endpoints.