Twitter Watch Reply

使用 6551 Twitter/X 接口监控指定账号的新推文，并基于推文内容生成 AI 回复草稿；在半自动模式下，先给出候选回复，待用户确认后再通过已登录的浏览器自动回复。用于：监控某些账号、发现其新推、生成评论、人工确认后回复、避免重复回复、管理 watchlist 和状态文件。依赖环境变量 TWITTER_T...

This skill largely does what it claims (poll a 3rd‑party 6551 API for tweets, generate reply candidates, and manage a local state directory), but the package metadata failing to declare the required TWITTER_TOKEN is a red flag — it reduces transparency about what secrets the skill needs. Before installing: (1) inspect the included scripts (doctor.py, fetch_latest_tweets.py) and confirm you are comfortable giving TWITTER_TOKEN to the 6551 service (ai.6551.io); (2) run doctor.py in a safe/test environment to see what it attempts and what responses the 6551 endpoints return; (3) avoid storing the token in source control and prefer an isolated runtime (container or VM); (4) if you need stronger assurance, ask the publisher to correct the registry metadata to declare TWITTER_TOKEN and describe precisely what the token allows. If you cannot verify the origin/permissions of the 6551 token, do not provide credentials or enable automated sending.

Type: OpenClaw Skill Name: twitter-watch-reply Version: 0.1.2 The skill bundle is a legitimate tool for monitoring Twitter accounts and generating AI-assisted reply drafts using the 6551.io API. The code logic across scripts like `fetch_latest_tweets.py` and `watch_state.py` is transparent and strictly aligned with the stated purpose of semi-automatic social media management. It includes safety features such as requiring user confirmation before sending replies and provides a diagnostic script (`doctor.py`) to help users configure environment variables correctly. No evidence of data exfiltration, malicious execution, or prompt injection was found.