← 返回 Skills 市场
97
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install twitter-aisa
功能描述
Search and retrieve Twitter/X profiles, tweets, trends, and Spaces via AISA relay, and publish approved posts with OAuth without sharing passwords.
安全使用建议
This package appears to implement what it says: a Twitter/X client that routes reads and OAuth-backed posting through api.aisa.one. Before installing, verify the skill's provenance (there's no authoritative homepage/source in the registry and the publisher identity is opaque). Be aware that any workspace media files and OAuth approvals will be uploaded to the relay (api.aisa.one) and that you must provide an AISA_API_KEY to use it — only supply that key if you trust the relay operator. Also note the registry metadata is inconsistent (it doesn't declare the required AISA_API_KEY and python3 even though SKILL.md and the scripts require them); ask the publisher to correct manifest fields or provide a verifiable homepage/source before broad use. If you cannot verify the relay, consider using an official Twitter/X API integration or running these scripts in an isolated environment and reviewing the code yourself.
功能分析
Type: OpenClaw Skill
Name: twitter-aisa
Version: 1.0.2
The skill bundle provides Twitter/X integration via a third-party relay API (api.aisa.one). While the implementation appears professional and lacks clear malicious intent, it utilizes high-risk capabilities including network access and local file reading (for media uploads in scripts/twitter_oauth_client.py). Per the provided instructions, risky capabilities that are plausibly needed for the stated purpose but involve network or file access should be classified as suspicious. The bundle includes well-defined scripts for data retrieval and OAuth-based posting, and it explicitly instructs the agent to avoid requesting user passwords, which serves as a security guardrail.
能力标签
能力评估
Purpose & Capability
The skill name, SKILL.md, and included Python clients all implement Twitter/X read and OAuth posting via the AISA relay (https://api.aisa.one). The requested secret (AISA_API_KEY) is appropriate for a relay-based client. However, the registry-level summary at the top claims no required env vars or binaries while SKILL.md and the scripts require python3 and AISA_API_KEY — an inconsistent manifest entry.
Instruction Scope
Runtime instructions are focused on read operations and OAuth-backed posting and explicitly require uploading user-supplied workspace media files as multipart/form-data to the relay. The scripts access only environment variables (AISA_API_KEY), local workspace files for media, and call webbrowser optionally. There is no instruction to read unrelated system files or secrets—but the workflow does send user-provided attachments and OAuth flows to the external relay, which is expected but privacy-relevant.
Install Mechanism
This is an instruction-only release with no install spec; scripts run directly with python3. That reduces installation risk because nothing is downloaded or installed at runtime by the skill itself.
Credentials
The only runtime secret the skill needs is AISA_API_KEY, which is proportionate to a relay-based Twitter client. The concern is the manifest inconsistency: the top-level registry data lists 'Required env vars: none' while SKILL.md and the code require AISA_API_KEY (and declare it as primaryEnv). Also, providing AISA_API_KEY grants the relay permission to act on your behalf — you should confirm the relay operator is trusted before supplying it.
Persistence & Privilege
The skill does not request always: true, does not modify other skills or system configs, and has no install-time persistence. It only runs as a user-invoked skill (normal).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install twitter-aisa - 安装完成后，直接呼叫该 Skill 的名称或使用
/twitter-aisa触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
- Added author information and set `user-invocable: true` in the skill metadata.
- Updated required system bins to only include `python3`.
- Clarified required environment variables under `requires` and metadata sections.
- Specified included files in the metadata (`scripts/*` and `references/*`).
v1.0.1
- Removed non-runtime and redundant files (e.g., CHECKLIST.md, duplicate scripts) to streamline the release bundle.
- Added `references/post_twitter.md` for clearer posting workflow guidance.
- Maintained core API client functionality in `scripts/twitter_client.py` and OAuth/posting logic in `scripts/twitter_oauth_client.py`.
- Simplified environment configuration details and removed optional overrides from documentation.
- No changes to runtime logic; focus is on cleanup and improving release documentation.
v1.0.0
Initial release of openclaw-twitter skill for X/Twitter research and posting via AISA relay.
- Enables search and reading of X/Twitter profiles, tweets, trends, lists, communities, and Spaces.
- Supports OAuth-based publishing of text, image, and video posts without needing passwords.
- Requires only the `AISA_API_KEY` for secure API access—no legacy credentials needed.
- Includes Python scripts for automated research, monitoring, and approved posting workflows.
- Keeps user authentication secure by providing authorization links for posting actions.
元数据
常见问题
twitter-aisa 是什么？
Search and retrieve Twitter/X profiles, tweets, trends, and Spaces via AISA relay, and publish approved posts with OAuth without sharing passwords. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 97 次。
如何安装 twitter-aisa？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install twitter-aisa」即可一键安装，无需额外配置。
twitter-aisa 是免费的吗？
是的，twitter-aisa 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
twitter-aisa 支持哪些平台？
twitter-aisa 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 twitter-aisa？
由 bibaofeng（@bibaofeng）开发并维护，当前版本 v1.0.2。
推荐 Skills