Twitter Api Alternative

Twitter API Alternative — Search 1B+ tweets with natural language queries, boolean filters, and one-click CSV exports (up to 64K rows). Look up profiles, find users by topic, and track conversations. No developer account needed, no complex OAuth setup — 2-minute setup via Xpoz MCP.

This skill appears internally consistent with its description — it uses a helper tool (mcporter) to call the Xpoz MCP service and delegates auth to an xpoz-setup OAuth flow. Before installing: 1) Verify the mcporter npm package (publisher, downloads, repo) because npm installs run code on your machine. 2) Review Xpoz's privacy/terms — CSV exports can contain large amounts of user data and network traffic goes to mcp.xpoz.ai. 3) Inspect the xpoz-setup skill (what it stores and what scopes it requests) before granting OAuth access; prefer a dedicated account with minimal privileges. 4) If you have policy constraints, test in an isolated environment (VM/container) first. If you want, provide the mcporter package link and xpoz-setup skill manifest and I can check them for further red flags.

Type: OpenClaw Skill Name: twitter-api-alternative Version: 1.2.1 The skill instructs the agent to install an external Node.js package, `mcporter`, via `npm install`. While this is a standard installation method and plausibly needed for the skill's stated purpose (interacting with the Xpoz service), `npm install` is a known vector for supply chain attacks, as packages can execute arbitrary code during installation (pre/post-install scripts). This represents a significant risky capability, even without clear evidence of intentional malicious behavior within the provided `SKILL.md` file itself. All network communication is declared to `mcp.xpoz.ai` and appears to be for the stated purpose of social media data search and export.