← 返回 Skills 市场
371
总下载
0
收藏
2
当前安装
11
版本数
在 OpenClaw 中安装
/install twitter-content-generator
功能描述
AI-powered Twitter/X content generator. Generate engaging tweets, threads, and content strategies using Sloan agent.
安全使用建议
This skill will generate tweets but also charges a small fee via skillpay.me. Important things to check before installing or using it:
- The code contains a hard-coded merchant key; if you do not provide SKILLPAY_MERCHANT_KEY, payments may go to the embedded key (likely the publisher). Set SKILLPAY_MERCHANT_KEY to your own merchant key before using the skill if you expect payments to go to your account.
- The README and code contain contradictory statements about whether payments are automatic or require your key — do not assume payments go to your account without verifying the merchant_key value.
- Consider running the skill in test mode (--test) first to avoid charges and confirm behavior.
- Inspect package-lock.json: many dependencies are resolved from a non-standard mirror (mirrors.tencentyun.com). If you will install/run this code, prefer using official registries or re-resolving dependencies from trusted sources.
- If you are not comfortable, fork or obtain the source, remove the embedded merchant key, and/or replace payment calls with a version that requires explicit configuration of your merchant key before any network charge is attempted.
- Low-risk mitigation: run the included tests locally, verify that processPayment requires your key, and monitor network calls (e.g., with a proxy) when you first run the skill.
功能分析
Type: OpenClaw Skill
Name: twitter-content-generator
Version: 1.0.9
The skill is a legitimate Twitter content generator that uses the OpenClaw 'Sloan' agent to produce tweets and threads. It utilizes a pay-per-use monetization model via the skillpay.me API, which is transparently documented in the SKILL.md and README.md files. While it contains a hardcoded merchant key (index.js) to facilitate default payments to the author, this behavior is explicitly mentioned in the documentation and does not constitute credential theft or exfiltration. The use of child_process.spawn to call the openclaw CLI is implemented safely with argument arrays, minimizing shell injection risks.
能力评估
Purpose & Capability
The skill's stated purpose (generate tweets/threads via the Sloan agent) matches the code that spawns the OpenClaw agent and falls back to a local gateway. However, the package also implements pay-per-use billing and includes a hard-coded merchant key by default. While payment handling is plausibly part of a paid skill, embedding a merchant key that causes payments to go to the publisher by default contradicts parts of the README/SKILL.md and is disproportionate without clear user consent.
Instruction Scope
Runtime instructions and code limit operations to: (1) invoking the local 'openclaw' CLI to run the 'sloan' agent, (2) falling back to a local gateway HTTP call, and (3) calling skillpay.me to charge for usage. The instructions do not read arbitrary user files or unrelated environment variables. This scope is coherent with content generation plus payment handling, but the payment behavior needs scrutiny (see environment_proportionality).
Install Mechanism
No install spec is provided (instruction-only skill), which is lower risk. However, the package includes source files and a package-lock.json that resolves many dependencies from a non-standard registry (mirrors.tencentyun.com). Using an alternate/untrusted registry increases supply-chain risk and should be reviewed.
Credentials
Declared environment vars are optional (SKILLPAY_MERCHANT_KEY, OPENCLAW_GATEWAY_TOKEN). The code contains a hard-coded merchant key as a default (sk_91fff75a...), meaning if the user does not set SKILLPAY_MERCHANT_KEY, payments will be sent using that embedded key (likely to the publisher). Documentation is inconsistent: README sometimes claims 'embedded merchant key, no setup required' and elsewhere instructs users to set their own key. Embedding a secret credential in source code and defaulting to it is disproportionate and potentially deceptive.
Persistence & Privilege
The skill does not request elevated platform privileges. always is false, no special persistence or system-wide configuration changes are requested. The skill spawns a local 'openclaw' binary and performs normal HTTP calls for fallback and payments; that behavior is expected for its purpose.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install twitter-content-generator - 安装完成后,直接呼叫该 Skill 的名称或使用
/twitter-content-generator触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.9
Security fix: Move merchant_key to code, remove from SKILL.md to avoid false positive
v1.0.8
Fix: Add merchant_key, clarify payment goes to publisher
v1.0.7
Clarify SKILLPAY_MERCHANT_KEY requirement in documentation
v1.0.6
Add merchant key for payments
v1.1.0
**Merchant key requirement & payment flow update**
- Now requires you to set your own `SKILLPAY_MERCHANT_KEY` environment variable.
- Payments now go to your own SkillPay merchant account instead of the skill publisher.
- SKILL.md updated with clarified environment variable instructions and requirements for payment setup.
- No changes to usage or command options.
v1.0.5
- Added documentation for new environment variables (`SKILLPAY_MERCHANT_KEY`, `OPENCLAW_GATEWAY_TOKEN`) in SKILL.md.
- No functional changes to features or options.
- Updated documentation to clarify optional configuration for payments and gateway auth.
v1.0.4
- Updated requirements section in documentation to mention OpenClaw Gateway and embedded merchant key for payments.
- No changes to product features or pricing.
- Documentation improvements for clarity.
v1.0.3
- Improved and expanded Skill documentation for clarity and usability.
- Updated feature list: clarified AI capabilities, listed supported styles, and customization options.
- Added detailed usage examples and option descriptions.
- Updated support and contact information.
- Removed references to scheduling, analytics, and free tier.
v1.0.2
- Updated package.json for version 1.0.2.
- No changes to documentation or feature set in SKILL.md.
v1.0.1
- Updated version to 1.0.1.
- Minor documentation formatting and metadata updates.
- No functional changes to features or usage.
v1.0.0
Initial release of Twitter Content Generator:
- Generate engaging tweets, threads, and content strategies with AI.
- Analyze trending topics and hashtags for relevant content.
- Schedule posts and track engagement with built-in analytics.
- Simple pay-per-use pricing with a free tier for up to 10 generations.
- Easy configuration for style, length, hashtags, emojis, and language.
- Integrates with OpenClaw (Sloan agent) and supports SkillPay payments.
元数据
常见问题
Twitter Content Generator 是什么?
AI-powered Twitter/X content generator. Generate engaging tweets, threads, and content strategies using Sloan agent. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 371 次。
如何安装 Twitter Content Generator?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install twitter-content-generator」即可一键安装,无需额外配置。
Twitter Content Generator 是免费的吗?
是的,Twitter Content Generator 完全免费(开源免费),可自由下载、安装和使用。
Twitter Content Generator 支持哪些平台?
Twitter Content Generator 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Twitter Content Generator?
由 icepopma(@icepopma)开发并维护,当前版本 v1.0.9。
推荐 Skills