← 返回 Skills 市场
153
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install twexapi-cli
功能描述
Use this skill when the task should be done through the twexapi command-line client, including installing the CLI, configuring app or profile auth, previewin...
安全使用建议
This skill appears to do what it says: it's a CLI for twexapi and needs an API key and/or cookie/auth_token to make requests. Before installing: 1) Verify you trust the npm package/source (npm install -g runs third-party code). 2) Be aware that credentials (API key, cookies, auth_token, ct0) are stored as plain JSON by default at ~/.twexapi/config.json — use --config-dir or TWEXAPI_CONFIG_DIR to isolate or avoid leaving secrets on shared machines/CI. 3) Prefer --dry-run before performing write actions and avoid pasting long-lived tokens into shared logs. 4) If you need higher assurance, inspect the included source files (they're present here) or run the CLI from a local checkout rather than installing globally.
功能分析
Type: OpenClaw Skill
Name: twexapi-cli
Version: 0.1.1
The twexapi-cli skill is a standard command-line interface for interacting with the twexapi.io service. It manages API keys and session cookies, storing them in a local configuration file (~/.twexapi/config.json) and providing convenience commands for Twitter-like actions (tweeting, searching, following). The code follows good security practices for a CLI, such as masking secrets in output and providing a --dry-run mode. The instructions in SKILL.md are safety-conscious, advising the AI agent to use dry-runs and verify credentials before execution. No evidence of data exfiltration to unauthorized domains, malicious execution, or obfuscation was found.
能力评估
Purpose & Capability
Name/description match the included code and SKILL.md: this is a command-line client for twexapi endpoints, with support for saved app configs and profiles, dry-run previews, and both convenience commands and raw path requests. The code and instructions only request the API key, cookies, auth_token, and an optional config-dir/base-url — all relevant to the stated purpose.
Instruction Scope
SKILL.md and the code limit actions to installing/running the CLI, building HTTP requests to the twexapi base URL, and reading/writing the CLI config (default ~/.twexapi/config.json). There are no instructions to scan unrelated system files, exfiltrate arbitrary data, or call unexpected external endpoints beyond the configured base URL. The CLI warns about paths that may contain the auth_token in URLs and recommends dry-run before write actions.
Install Mechanism
No custom install spec is embedded; SKILL.md recommends installing the published npm package or running the local node entrypoint. This is a common, low-risk install pattern. Users should still verify the npm package's origin before installing globally.
Credentials
The skill uses TWEXAPI_KEY, TWEXAPI_BASE_URL, and TWEXAPI_CONFIG_DIR (all relevant to a CLI that calls an API). Registry metadata did not declare required env vars, but the code and README document them. Important: saved app configs and profiles may store API keys, cookies, auth_token, and ct0 in plain JSON at ~/.twexapi/config.json (or a custom config-dir). This is expected for this tool but increases risk on shared machines or CI unless an isolated config-dir is used.
Persistence & Privilege
The skill does persist its own config under a dedicated directory and will write config files (saveConfig). It does not request always:true, does not alter other skills, and does not require system-wide privileges. Use of an isolated --config-dir is supported and recommended for safer testing.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install twexapi-cli - 安装完成后，直接呼叫该 Skill 的名称或使用
/twexapi-cli触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.1
twexapi-cli 0.1.1
- Expanded authentication docs: now documents support for `TWEXAPI_BASE_URL`, `TWEXAPI_CONFIG_DIR`, persistent config in `~/.twexapi/config.json`, and credential isolation on shared machines.
- Clarified config and credential storage, including how saved apps and profiles are handled.
- Noted that `auth cookie` includes the `auth_token` in request paths and should be treated carefully in logs.
- Documentation improvements throughout for clarity and explicit safety recommendations.
- No changes to CLI command behavior—documentation updates only.
v0.1.0
Initial release of twexapi-cli skill.
- Provides guidance for installing, configuring, and using the twexapi CLI.
- Covers supported authentication flows for both read and write operations.
- Details command selection between convenience commands and raw path usage.
- Emphasizes safety rules including the use of `--dry-run` for write operations.
- Outlines recommended testing and configuration verification steps.
元数据
常见问题
Twexapi CLI 是什么？
Use this skill when the task should be done through the twexapi command-line client, including installing the CLI, configuring app or profile auth, previewin... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 153 次。
如何安装 Twexapi CLI？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install twexapi-cli」即可一键安装，无需额外配置。
Twexapi CLI 是免费的吗？
是的，Twexapi CLI 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Twexapi CLI 支持哪些平台？
Twexapi CLI 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Twexapi CLI？
由 yeahjjyy（@yeahjjyy）开发并维护，当前版本 v0.1.1。
推荐 Skills