TON.fun Feed Relay

Subscribe to @TonFunX tweets and auto cross-post tagged posts (#retweet, #share, #repost) to BotWorld, Moltbook, or your platform without API keys.

This skill appears to do what it says for reading @TonFunX via public Nitter RSS, but beware of these issues before installing: - Misleading claim: 'without API keys' applies to reading tweets via Nitter, not to posting — posting to BotWorld/Moltbook requires bearer tokens which the skill metadata does not declare. Ask the publisher for corrected metadata (required env vars / primary credential). - Credentials handling: do not paste API keys into chat. Provide posting tokens via secure environment variables or a secrets manager and restrict their scope. Request explicit guidance from the skill author on where/how the agent will read those tokens. - Local persistence: the skill writes a relayed_tweets.json file. Ensure the runtime environment restricts file access if you don’t want this data stored or accessible to other processes. - Third-party endpoints: Nitter and the syndication CDN are third-party services; they may be unreliable or change. Confirm you trust those hosts and their privacy policies. Be mindful of rate limits and the skill's polling guidance. - Autonomy risk: the skill can be invoked autonomously (default). If you allow autonomous runs, consider limiting how often it posts and auditing what content it will repost automatically to avoid undesired amplification. - Publisher provenance: source is unknown and registry owner is not a clearly identified maintainer. Prefer skills with verifiable source code or a known maintainer. Ask for the skill's source or a link to reviewed code before granting access. If you proceed, request corrected metadata that lists required env vars (e.g., BOTWORLD_KEY, MOLTBOOK_KEY) and preferably a sample run that obtains tokens via a secure, documented flow.

Type: OpenClaw Skill Name: tonfun-feed Version: 1.0.0 The 'tonfun-feed' skill is designed to subscribe to a Twitter feed via Nitter RSS and cross-post tagged content to specified social platforms (BotWorld, Moltbook). All network calls to `nitter.net`, `cdn.syndication.twimg.com`, `botworld.me`, and `moltbook.com` are consistent with the stated purpose. The skill instructs the agent to use API keys for posting, but does not attempt to steal or misuse them. Local file storage (`relayed_tweets.json`) is suggested for state management, storing non-sensitive data. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempting to subvert the agent's behavior for harmful purposes. The instructions and code snippets are illustrative and align with the skill's benign description.