← 返回 Skills 市场
Tweet Summarizer Lite
作者
FranciscoBuiltDat
· GitHub ↗
· v1.0.2
558
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install tweet-summarizer-lite
功能描述
Fetch and summarize single tweets from Twitter/X. Basic search and single tweet fetching. Lightweight version perfect for quick tweet lookups.
安全使用建议
Before installing or running this skill:
- Confirm the source: the registry metadata you provided lacks required env and binary declarations, while the bundled SKILL.md/package.json/scripts do require AUTH_TOKEN, CT0, and the 'bird' CLI. Ask the publisher to explain the mismatch or install from the official repo URL (verify commit history and publisher identity).
- Treat AUTH_TOKEN and CT0 as highly sensitive session cookies. Prefer using a throwaway/dedicated account for scraping. Do not paste your primary account cookies into third-party tools unless you trust them.
- Verify the 'bird' CLI: inspect its source or install from a trusted release. The Python code shown here does not exfiltrate tokens itself, but the bird binary will perform network requests using those cookies—so bird's trustworthiness matters.
- Fix/document path inconsistencies: the scripts save to ~/.openclaw/.../data/tweets-lite while README/SKILL.md mention different paths. Confirm where your data and any config files will be written before running.
- If you proceed, do not commit cookies or the data folder to version control; rotate cookies if you suspect compromise.
If you need help verifying the bird binary or want me to flag exact lines of concern in the code, I can do a deeper review. Clarifying the metadata mismatches (registry vs SKILL.md/package.json) would raise confidence.
功能分析
Type: OpenClaw Skill
Name: tweet-summarizer-lite
Version: 1.0.2
The skill's functionality aligns with its stated purpose of fetching and summarizing tweets, which inherently requires access to Twitter via user-provided session cookies (`AUTH_TOKEN`, `CT0`). These sensitive credentials are handled via environment variables, a recommended practice, and are explicitly documented in `SKILL.md`, `README.md`, and a comprehensive `SECURITY.md`. The `SECURITY.md` file is particularly strong, detailing risks, best practices, and explicitly stating 'No data exfiltration' and 'No credential logging'. The code uses `subprocess.run` to execute the `bird` CLI, passing arguments and environment variables, which is a legitimate use for its function. There is no evidence of obfuscation, unauthorized data exfiltration, persistence mechanisms, or prompt injection attempts against the agent. The local storage of tweets is within the designated workspace.
能力评估
Purpose & Capability
The skill's behavior (needs AUTH_TOKEN/CT0, uses the bird CLI, stores tweets locally) is coherent with a Twitter/X fetcher. However the registry metadata you provided lists no required env vars or binaries, while SKILL.md and package.json declare AUTH_TOKEN, CT0, and the 'bird' CLI. Multiple files and docs disagree on storage paths (README/SKILL.md mention ~/.openclaw/.../data/tweets/ vs scripts using tweets-lite). These mismatches between published metadata and the included files are a red flag (supply-chain or packaging errors) and should be clarified.
Instruction Scope
SKILL.md instructs the agent to run the included Python scripts and to ask the user to copy session cookies from their browser DevTools. The scripts only read AUTH_TOKEN/CT0 from environment variables, call the local 'bird' CLI, and write tweet text to a local index.json. They do not contact any unexpected external endpoints themselves, but they do rely on the bird CLI to contact Twitter. The manual cookie-extraction instruction is sensitive (it directs users to copy credentials) but is consistent with how browser session cookies are used.
Install Mechanism
There is no install spec in the registry (instruction-only), which reduces direct install risk. However the README and SKILL.md recommend installing the third-party 'bird' CLI (npm install -g @steipete/bird). Installing that CLI pulls code from an external registry; if you trust this skill you must also trust that third-party tool. The skill itself does not download or execute arbitrary remote archives.
Credentials
Requesting AUTH_TOKEN and CT0 (Twitter session cookies) is proportionate for a tool that fetches tweets via an authenticated session. That said, these are highly sensitive credentials (equivalent to account session access). The skill declares it only uses them in-memory and does not log or transmit them itself, but the actual network interactions are performed by the bird CLI, so trust depends on that binary. Also note the registry metadata omitted these required env vars, which is inconsistent.
Persistence & Privilege
The skill does not request always:true, it is user-invocable, and only writes files under the user's home (~/.openclaw/...). It writes its own config and stored tweets; it does not modify other skills or global agent settings. This level of persistence is expected for a local fetch-and-store utility.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tweet-summarizer-lite - 安装完成后，直接呼叫该 Skill 的名称或使用
/tweet-summarizer-lite触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
No functional changes in this version.
- No file changes detected.
- Documentation was updated for clearer usage instructions and guidance.
- Improved explanations on when and how to use the skill.
- Added troubleshooting steps and a user-focused interaction guide.
v1.0.1
- Added requirements and permissions section to SKILL.md, specifying needed environment variables, binaries, and network/filesystem access.
- No code changes, only documentation updated.
- Now clearly lists bird CLI, AUTH_TOKEN, and CT0 as required.
- Permissions detail API/network usage and tweet storage path.
v1.0.0
Initial release: Single tweet fetching, basic search, and auto-summary generation
元数据
常见问题
Tweet Summarizer Lite 是什么？
Fetch and summarize single tweets from Twitter/X. Basic search and single tweet fetching. Lightweight version perfect for quick tweet lookups. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 558 次。
如何安装 Tweet Summarizer Lite？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tweet-summarizer-lite」即可一键安装，无需额外配置。
Tweet Summarizer Lite 是免费的吗？
是的，Tweet Summarizer Lite 完全免费（开源免费），可自由下载、安装和使用。
Tweet Summarizer Lite 支持哪些平台？
Tweet Summarizer Lite 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Tweet Summarizer Lite？
由 FranciscoBuiltDat（@franciscobuiltdat）开发并维护，当前版本 v1.0.2。
推荐 Skills