← 返回 Skills 市场

Lebevolae X Post

Name: Lebevolae X Post
Author: lebevolae

作者 lebevolae · GitHub ↗ · v1.0.1 · MIT-0

cross-platform ⚠ suspicious

250

总下载

当前安装

版本数

在 OpenClaw 中安装

/install lebevolae-x-post

功能描述

Automatically post text or a single local image tweet to X/Twitter using provided developer credentials.

使用说明 (SKILL.md)

---\r \r name: Leo X Poster\r \r slug: lebevolae-x-post\r \r version: 0.1.0\r \r description: "Leo 的自定义技能：自动发推文到 X/Twitter，支持文本和图片"\r \r author: "Leo Liu (@LBevolae)"\r \r tags: [twitter, x, post, social]\r \r requirements:\r \r - TWITTER_API_KEY\r \r - TWITTER_API_SECRET\r \r - TWITTER_ACCESS_TOKEN\r \r - TWITTER_ACCESS_SECRET\r \r ---\r \r \r \r ## 功能\r \r 发推文到 X，支持纯文本或带一张本地图片。\r \r \r \r ## 使用示例\r \r leo，发推：今天天气不错！ #测试\r \r leo，发带图推文：内容xxx，图片 C:\Users\bazin\Desktop\photo.jpg\r \r \r \r ## 配置\r \r 需要 X Developer 账号的 4 个凭证（去 https://developer.twitter.com 申请 App，OAuth 1.0a read+write）。\r \r 设置为环境变量或 OpenClaw config。\r \r

安全使用建议

Do not install or provide your primary Twitter/X credentials until the metadata mismatch is resolved. Ask the publisher why the registry lists no required env vars while SKILL.md requires four OAuth tokens. If you still want to test it: 1) create a throwaway Twitter developer app and account or use tokens with only test permissions; 2) store credentials in the platform's secure config rather than pasting them into chat; 3) restrict the agent's ability to run autonomously or require explicit confirmation before posting; and 4) verify the skill's behavior first on a test post to ensure it only posts what you expect. If the publisher cannot explain the metadata omission, treat the package as untrusted.

功能分析

Type: OpenClaw Skill Name: lebevolae-x-post Version: 1.0.1 The skill bundle contains only metadata and documentation for a Twitter/X posting tool. The instructions in SKILL.md describe standard functionality for posting text and images using legitimate API credentials, and no executable code or malicious prompt-injection attempts were found in the provided files (_meta.json, SKILL.md).

能力评估

⚠ Purpose & Capability

The SKILL.md clearly requires the four Twitter OAuth credentials (API key/secret and access token/secret), which is coherent with a posting-to-X capability; however the registry metadata lists no required environment variables or primary credential. That mismatch between declared metadata and the runtime instructions is a material inconsistency.

ℹ Instruction Scope

Instructions are simple and scoped to posting text or a single local image to X, and they point the agent to use local image paths and environment variables. Reading a local image file is expected for this purpose, but the skill's instructions grant the agent access to arbitrary local paths (example uses C:\Users\...\photo.jpg) so the agent could access other files if given broad file-access permissions.

✓ Install Mechanism

Instruction-only skill with no install spec or downloaded code; this minimizes supply-chain risk because nothing is written to disk or fetched at install time.

⚠ Credentials

Requesting the four OAuth credentials is proportionate to the stated function, but the registry metadata does not declare any required env vars or a primary credential. That omission could lead users to overlook that they must supply sensitive write-capable tokens, increasing risk of accidental credential exposure or misuse.

ℹ Persistence & Privilege

The skill is not force-enabled (always=false) and uses the platform default allowing autonomous invocation. That is normal, but combined with write-capable Twitter credentials it means the agent could post to X without further prompts if it invokes the skill—consider restricting invocation or using tokens for a throwaway account.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install lebevolae-x-post
安装完成后，直接呼叫该 Skill 的名称或使用 /lebevolae-x-post 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

- Minor update to SKILL.md formatting and metadata quoting. - No functional changes to the skill itself.

v1.0.0

Initial release of Leo X Poster skill. - Post tweets to X/Twitter with text or a single local image. - Simple commands for text-only or image tweets. - Requires Twitter API keys and tokens for authentication. - Configure credentials via environment variables or OpenClaw config. - Documentation included for setup and usage examples.

元数据

Slug lebevolae-x-post

版本 1.0.1

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 2

常见问题

Lebevolae X Post 是什么？

Automatically post text or a single local image tweet to X/Twitter using provided developer credentials. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 250 次。

如何安装 Lebevolae X Post？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install lebevolae-x-post」即可一键安装，无需额外配置。

Lebevolae X Post 是免费的吗？

是的，Lebevolae X Post 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Lebevolae X Post 支持哪些平台？

Lebevolae X Post 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Lebevolae X Post？

由 lebevolae（@lebevolae）开发并维护，当前版本 v1.0.1。