X/Twitter Automation: 30+ APIs, OAuth Post, One Key

Searches and reads X (Twitter): profiles, timelines, mentions, followers, tweet search, trends, lists, communities, and Spaces. Publishes posts after the use...

What to consider before installing: - Trust model: this skill proxies all Twitter/X reads and writes through a third‑party relay (api.aisa.one). Installing it means your AISA_API_KEY will be used to query and to publish via that service — only install if you trust aisa.one and its security/privacy practices. - Secret power: the single AISA_API_KEY is a high‑privilege credential. If leaked or misused it could allow reads and posts via the relay. Use a scoped or revocable key if possible and rotate it if you suspect compromise. - Media handling / privacy: when posting, the skill will upload local workspace files (images/videos) to the relay backend. Treat that as data exfiltration to an external service — don’t use it with sensitive files unless you’re comfortable with that transfer. - Undeclared env vars: the scripts honor TWITTER_RELAY_BASE_URL and TWITTER_RELAY_TIMEOUT (not listed in metadata). Review or set TWITTER_RELAY_BASE_URL if you want to change the target; otherwise the default points to api.aisa.one. - Posting behavior: the instructions recommend trying to post immediately for user intents to publish. Confirm whether you want the agent to attempt posting automatically; consider restricting autonomous agent actions or requiring explicit confirmation before posting live content. - Test safely: if you proceed, test with a disposable or non-production account first. Verify the OAuth flow and inspect what data is sent to the relay (especially media uploads). If you can get more info from the publisher (proof-of-ownership of aisa.one endpoints, privacy policy, or ability to use your own relay URL), that would raise confidence. Without that, treat the skill as coherent but carrying meaningful privacy and trust risks.

Type: OpenClaw Skill Name: openclaw-twitter Version: 1.0.3 The skill bundle provides a legitimate integration for reading and posting to Twitter/X via the AIsa API (api.aisa.one). The Python scripts (twitter_client.py and twitter_oauth_client.py) implement standard API interactions, including OAuth authorization flows, media uploads using multipart/form-data, and complex tweet threading logic that respects Twitter's character weighting. The instructions in SKILL.md and references/post_twitter.md are well-structured, providing clear guidance to the agent on handling user requests while explicitly including security guardrails, such as instructing the agent never to ask for user passwords.