← 返回 Skills 市场
qwarranto

Bird.Backup

作者 QWarranto · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
112
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install bird-backup
功能描述
X/Twitter CLI for reading, searching, posting, and engagement via cookies.
使用说明 (SKILL.md)

bird 🐦

Fast X/Twitter CLI using GraphQL + cookie auth.

Install

# npm/pnpm/bun
npm install -g @steipete/bird

# Homebrew (macOS, prebuilt binary)
brew install steipete/tap/bird

# One-shot (no install)
bunx @steipete/bird whoami

Authentication

bird uses cookie-based auth.

Use --auth-token / --ct0 to pass cookies directly, or --cookie-source for browser cookies.

Run bird check to see which source is active. For Arc/Brave, use --chrome-profile-dir \x3Cpath>.

Commands

Account & Auth

bird whoami                    # Show logged-in account
bird check                     # Show credential sources
bird query-ids --fresh         # Refresh GraphQL query ID cache

Reading Tweets

bird read \x3Curl-or-id>          # Read a single tweet
bird \x3Curl-or-id>               # Shorthand for read
bird thread \x3Curl-or-id>        # Full conversation thread
bird replies \x3Curl-or-id>       # List replies to a tweet

Timelines

bird home                      # Home timeline (For You)
bird home --following          # Following timeline
bird user-tweets @handle -n 20 # User's profile timeline
bird mentions                  # Tweets mentioning you
bird mentions --user @handle   # Mentions of another user

Search

bird search "query" -n 10
bird search "from:steipete" --all --max-pages 3

News & Trending

bird news -n 10                # AI-curated from Explore tabs
bird news --ai-only            # Filter to AI-curated only
bird news --sports             # Sports tab
bird news --with-tweets        # Include related tweets
bird trending                  # Alias for news

Lists

bird lists                     # Your lists
bird lists --member-of         # Lists you're a member of
bird list-timeline \x3Cid> -n 20  # Tweets from a list

Bookmarks & Likes

bird bookmarks -n 10
bird bookmarks --folder-id \x3Cid>           # Specific folder
bird bookmarks --include-parent           # Include parent tweet
bird bookmarks --author-chain             # Author's self-reply chain
bird bookmarks --full-chain-only          # Full reply chain
bird unbookmark \x3Curl-or-id>
bird likes -n 10

Social Graph

bird following -n 20           # Users you follow
bird followers -n 20           # Users following you
bird following --user \x3Cid>     # Another user's following
bird about @handle             # Account origin/location info

Engagement Actions

bird follow @handle            # Follow a user
bird unfollow @handle          # Unfollow a user

Posting

bird tweet "hello world"
bird reply \x3Curl-or-id> "nice thread!"
bird tweet "check this out" --media image.png --alt "description"

⚠️ Posting risks: Posting is more likely to be rate limited; if blocked, use the browser tool instead.

Media Uploads

bird tweet "hi" --media img.png --alt "description"
bird tweet "pics" --media a.jpg --media b.jpg  # Up to 4 images
bird tweet "video" --media clip.mp4            # Or 1 video

Pagination

Commands supporting pagination: replies, thread, search, bookmarks, likes, list-timeline, following, followers, user-tweets

bird bookmarks --all                    # Fetch all pages
bird bookmarks --max-pages 3            # Limit pages
bird bookmarks --cursor \x3Ccursor>        # Resume from cursor
bird replies \x3Cid> --all --delay 1000    # Delay between pages (ms)

Output Options

--json          # JSON output
--json-full     # JSON with raw API response
--plain         # No emoji, no color (script-friendly)
--no-emoji      # Disable emoji
--no-color      # Disable ANSI colors (or set NO_COLOR=1)
--quote-depth n # Max quoted tweet depth in JSON (default: 1)

Global Options

--auth-token \x3Ctoken>       # Set auth_token cookie
--ct0 \x3Ctoken>              # Set ct0 cookie
--cookie-source \x3Csource>   # Cookie source for browser cookies (repeatable)
--chrome-profile \x3Cname>    # Chrome profile name
--chrome-profile-dir \x3Cpath> # Chrome/Chromium profile dir or cookie DB path
--firefox-profile \x3Cname>   # Firefox profile
--timeout \x3Cms>             # Request timeout
--cookie-timeout \x3Cms>      # Cookie extraction timeout

Config File

~/.config/bird/config.json5 (global) or ./.birdrc.json5 (project):

{
  cookieSource: ["chrome"],
  chromeProfileDir: "/path/to/Arc/Profile",
  timeoutMs: 20000,
  quoteDepth: 1
}

Environment variables: BIRD_TIMEOUT_MS, BIRD_COOKIE_TIMEOUT_MS, BIRD_QUOTE_DEPTH

Troubleshooting

Query IDs stale (404 errors)

bird query-ids --fresh

Cookie extraction fails

  • Check browser is logged into X
  • Try different --cookie-source
  • For Arc/Brave: use --chrome-profile-dir

TL;DR: Read/search/engage with CLI. Post carefully or use browser. 🐦

安全使用建议
This skill is a thin wrapper around an external 'bird' CLI and appears coherent with its description, but it requires access to Twitter/X cookies to act on your behalf. Before installing or using it: 1) Verify the upstream project/repository (steipete/bird) and inspect the Homebrew tap and npm package source and maintainers; prefer installing from a trusted Homebrew tap or review the npm package contents before a global install. 2) Avoid exposing your primary browser profile; if possible create and use a dedicated browser profile that is logged into the account you want to use. 3) Prefer passing only the minimal auth token you need (and rotate tokens/passwords if you stop using the tool). 4) Be aware that supplying --chrome-profile-dir or pointing the tool at browser cookie DBs gives the CLI (and thus any code it runs) access to sensitive cookies — treat that as full account access. 5) Don’t run the installer or binary with elevated privileges. If you want higher assurance, request the skill author’s source repo and hashes for the distributed artifacts and review them before installing.
功能分析
Type: OpenClaw Skill Name: bird-backup Version: 1.0.0 The 'bird' skill bundle provides instructions for an AI agent to use a Twitter CLI tool that requires high-risk access to browser cookie databases (Chrome, Firefox, Arc, Brave) and sensitive authentication tokens (auth_token, ct0). While these capabilities are aligned with the tool's stated purpose of unofficial Twitter access, the programmatic extraction of browser credentials and the presence of a future-dated timestamp (March 2026) in _meta.json are notable risk indicators. No explicit evidence of malicious exfiltration was found in SKILL.md or _meta.json.
能力评估
Purpose & Capability
Name and description claim a Twitter/X CLI using cookie auth; the skill only requires the 'bird' binary and documents commands that are consistent with such a CLI (reading, search, posting, engagement). Requiring the 'bird' binary and providing brew/npm install options is proportionate to the stated purpose.
Instruction Scope
SKILL.md instructs use of cookie-based auth and describes passing cookies (--auth-token, --ct0) or pointing at browser cookie stores (--cookie-source, --chrome-profile-dir). Those instructions are consistent with the tool's purpose but involve accessing sensitive data (browser cookie DBs, ct0/auth cookies). The skill itself is instruction-only and does not embed code, but using the CLI as instructed can cause access to local browser profile files and cookies.
Install Mechanism
Install options are Homebrew (steipete/tap/bird) and npm (@steipete/bird). Both are plausible for distributing a CLI. Note: npm global installs execute unreviewed package code at install time; Homebrew taps are safer when coming from a trusted tap. No high-risk arbitrary URL downloads or extract steps are present.
Credentials
Registry metadata lists no required environment variables, but SKILL.md documents optional env vars and config file locations (BIRD_TIMEOUT_MS, BIRD_COOKIE_TIMEOUT_MS, BIRD_QUOTE_DEPTH, ~/.config/bird/config.json5, ./ .birdrc.json5) and expects cookies/ct0 tokens for auth. Requesting cookies or browser profile paths is reasonable for cookie-based auth but is sensitive — the skill does not require unrelated credentials and does not ask for broad system secrets beyond cookies.
Persistence & Privilege
always is false and there is no indication the skill modifies other skills or system-wide settings. The skill is user-invocable and can be invoked autonomously (platform default) but it doesn't request elevated or persistent privileges in its metadata.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install bird-backup
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /bird-backup 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of bird-backup v1.0.0. - Command-line interface for reading, searching, posting, and engaging with X/Twitter using cookie-based authentication. - Supports timelines, threads, lists, bookmarks, likes, social graph actions, and media uploads. - Flexible install options via npm, bun, or Homebrew. - Extensive output and configuration options, including JSON and plain formats. - Includes troubleshooting tips for common issues like cookie extraction and stale query IDs.
元数据
Slug bird-backup
版本 1.0.0
许可证 MIT-0
累计安装 1
当前安装数 0
历史版本数 1
常见问题

Bird.Backup 是什么?

X/Twitter CLI for reading, searching, posting, and engagement via cookies. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 112 次。

如何安装 Bird.Backup?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install bird-backup」即可一键安装,无需额外配置。

Bird.Backup 是免费的吗?

是的,Bird.Backup 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Bird.Backup 支持哪些平台?

Bird.Backup 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Bird.Backup?

由 QWarranto(@qwarranto)开发并维护,当前版本 v1.0.0。

💬 留言讨论