← 返回 Skills 市场
vmining

Kiro X Publisher

作者 Xinjin · GitHub ↗ · v1.1.0
cross-platform ⚠ suspicious
674
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install kiro-x-publisher
功能描述
Discover hot topics on X, enrich tweets one-by-one, score and summarize signals, generate one tweet draft, and optionally publish on schedule.
使用说明 (SKILL.md)

Kiro X Hot Publisher

Plugin producer: kiroai.io

End-to-end X workflow for Kiro:

  1. Discover trending tweets from X API
  2. Enrich each candidate via FxTwitter (full text/article support)
  3. Score and rank (engagement + freshness)
  4. Summarize key signals
  5. Generate exactly one tweet draft
  6. Optionally publish via X API (OAuth 1.0a)

Files

  • scripts/x_hot_pipeline.py
  • examples/cron_command.txt

Required env vars

Search:

  • X_BEARER_TOKEN (recommended)

Publish (optional, only when --post):

  • X_API_KEY
  • X_API_SECRET
  • X_ACCESS_TOKEN
  • X_ACCESS_TOKEN_SECRET

Quick start

python3 skills/kiro-x-hot-publisher/scripts/install_and_init.py

python3 skills/kiro-x-hot-publisher/scripts/x_hot_pipeline.py \
  --queries "AI,OpenAI,DeepSeek,Claude,Gemini" \
  --batch-size 10

Post directly:

python3 skills/kiro-x-hot-publisher/scripts/x_hot_pipeline.py \
  --queries "AI,OpenAI,DeepSeek" \
  --batch-size 10 \
  --post

Output

Default output folder: ./outputs/x-hot/

Generated files:

  • latest.json: full structured result
  • latest.txt: plain-text briefing + final tweet draft

Notes

  • This workflow is designed for public tweets only.
  • FxTwitter is a third-party dependency for enrichment; if unavailable, base X data is still used.
  • Keep --batch-size small initially (recommended 10).

Changelog

  • 1.1.0: Security hardening for scripts/setup_cron.sh (input validation and command construction safeguards).
安全使用建议
This skill appears to do what it says: it searches X, optionally enriches via FxTwitter, ranks items, drafts a single tweet, and can post if you supply OAuth keys. Before installing: (1) If you do not want it to post, do not provide the OAuth keys (X_API_KEY, X_API_SECRET, X_ACCESS_TOKEN, X_ACCESS_TOKEN_SECRET) — only X_BEARER_TOKEN is needed for search. Note the registry metadata currently lists all keys as required, so confirm the platform won't force you to supply them. (2) The setup cron script invokes openclaw.mjs via a Node binary; ensure node is available or skip the cron setup. (3) Enrichment uses api.fxtwitter.com (third party) — tweets/URLs sent to that endpoint may be seen by that service; review privacy implications. (4) The scripts write a .env.template to a local skill workspace; place and protect any real credentials you add. (5) Test in search-only mode first (no --post) and review outputs before enabling scheduled posting. If you want stronger assurance, request confirmation from the publisher (kiroai.io) about why registry metadata requires all OAuth env vars and whether cron setup requires node.
功能分析
Type: OpenClaw Skill Name: kiro-x-publisher Version: 1.1.0 This skill is classified as suspicious due to its inherent high-risk capabilities, specifically the ability to post tweets to X (Twitter) using OAuth 1.0a credentials, as implemented in `scripts/x_hot_pipeline.py` and scheduled by `scripts/setup_cron.sh`. While this functionality is explicitly stated as the skill's purpose and the `setup_cron.sh` script includes robust input validation and command construction safeguards against shell injection, the act of posting to a social media platform is a significant risky capability. Additionally, the skill relies on a third-party service (FxTwitter) for content enrichment, introducing an external dependency risk. There is no evidence of intentional malicious behavior such as unauthorized data exfiltration, backdoor installation, or prompt injection attempts against the agent.
能力评估
ℹ Purpose & Capability
Name/description match the included code: search via X API, enrich via FxTwitter, score/summarize, draft one tweet, and optionally post via OAuth 1.0a. However, registry metadata lists all OAuth keys as required even though the SKILL.md and scripts indicate posting is optional (search only needs X_BEARER_TOKEN). Also setup_cron.sh invokes a Node binary (openclaw.mjs) but the declared required binaries list only python3.
ℹ Instruction Scope
SKILL.md directs running included Python scripts; the code only uses X API and fxTwitter for enrichment and writes outputs to ./outputs/x-hot/. It does not read arbitrary system files. The enrichment step sends tweet URLs/content to api.fxtwitter.com — a third-party endpoint mentioned in the docs. The cron installer runs openclaw.mjs (via node) to register jobs, which is reasonable but not declared in required binaries.
✓ Install Mechanism
There is no external download/install step; the package is instruction-and-script based with Python files included. No archive downloads or execution of remote code are performed by the provided scripts.
ℹ Credentials
The skill requires X API credentials to post and a bearer token to search. This is proportional to functionality, but the registry declares all five X_* env vars as required while the documentation correctly marks four of them as optional (only needed when --post). Confirm whether the platform will require you to provide all keys or allows search-only operation with only X_BEARER_TOKEN.
✓ Persistence & Privilege
always is false and the skill does not request elevated or platform-wide persistent privileges. setup_cron.sh can register a scheduled job via openclaw.mjs (uses an OpenClaw CLI), which is a normal installer behavior and scoped to scheduling this skill's run.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install kiro-x-publisher
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /kiro-x-publisher 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.0
- Renamed the skill to "kiro-x-hot-publisher". - Added `scripts/install_and_init.py` for improved setup and initialization. - Removed `README.md`. - Updated documentation: improved quick start instructions, now referencing the new script. - Minor metadata and naming updates.
v1.0.0
Initial release: X trend discovery, scoring, draft generation, optional auto-posting.
元数据
Slug kiro-x-publisher
版本 1.1.0
许可证 —
累计安装 1
当前安装数 1
历史版本数 2
常见问题

Kiro X Publisher 是什么？

Discover hot topics on X, enrich tweets one-by-one, score and summarize signals, generate one tweet draft, and optionally publish on schedule. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 674 次。

如何安装 Kiro X Publisher？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install kiro-x-publisher」即可一键安装，无需额外配置。

Kiro X Publisher 是免费的吗？

是的，Kiro X Publisher 完全免费（开源免费），可自由下载、安装和使用。

Kiro X Publisher 支持哪些平台？

Kiro X Publisher 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Kiro X Publisher？

由 Xinjin（@vmining）开发并维护，当前版本 v1.1.0。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463556 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259610 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200551 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191226 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190235 · by oswalpalash

💬 留言讨论