Post Tweets

Use when the user needs to interact with X (Twitter) — searching tweets, looking up users/followers, posting tweets/replies, liking, retweeting, following/un...

This integration appears coherent, but exercise usual caution before granting the API key: use a scoped, revocable API key (not a long-lived primary account key), enable rotation, and monitor usage/billing. Pay attention to extraction and write costs (bulk extractions and write actions are metered) and always confirm any payment/charge flows. If you plan to receive webhooks, store the per-webhook secret securely (environment variable or secrets store). Because the skill is instruction-only and the source is 'unknown', verify the Xquik service/website (docs.xquik.com) independently and consider testing with a low-privilege test key before connecting production accounts or sensitive data (DMs, bookmarks, notifications) — those endpoints require explicit confirmation per the skill's instructions.

Type: OpenClaw Skill Name: post-tweets Version: 1.0.1 The skill bundle is a comprehensive integration for the Xquik API, providing 111 endpoints for interacting with X (Twitter), including searching, posting, bulk extraction, and giveaway draws. While it handles sensitive capabilities like DM access and financial transactions, it includes extensive security documentation and explicit instructions for the AI agent to require user confirmation for all write actions and billing operations. The bundle also features robust 'Indirect Prompt Injection' defenses to prevent untrusted X content from hijacking the agent's behavior (SKILL.md). No evidence of malicious intent, obfuscation, or unauthorized data exfiltration was found.