Wip Xai X Private

X Platform API. Read posts, search tweets, get bookmarks, post tweets, upload media.

This repo mostly does what it says (X API wrapper) but pay attention to three things before installing: 1) Metadata mismatch — the registry claims no required env vars but the skill expects X_BEARER_TOKEN and/or the full OAuth 1.0a tokens (and optional X_OP_VAULT/X_OP_ITEM). Ask the publisher to declare these explicitly. 2) auth.mjs runs the 1Password CLI via execSync to read secrets: that will execute a shell command in your environment to access vault items; if you prefer, provide credentials via environment variables instead and ensure the 'op' CLI isn't available or pointed at unrelated vaults. 3) upload_media reads local files by path (readFileSync) and will upload their contents to X — do not allow the skill to run in contexts where it can access sensitive files, and be cautious about allowing autonomous agent invocation of the MCP tools (an agent could call upload_media to exfiltrate files). Recommended actions: review/verify the code yourself, ensure registry metadata is corrected, run the skill in a least-privileged environment, and avoid granting it access to secrets or sensitive filesystem paths unless you trust the author and have validated the code.

Type: OpenClaw Skill Name: wip-xai-x Version: 1.0.4 The skill bundle provides a legitimate interface for the X (Twitter) API but contains a shell injection vulnerability in auth.mjs. The opRead function uses execSync to call the 1Password CLI with unsanitized input from environment variables (X_OP_VAULT and X_OP_ITEM), which could allow arbitrary command execution if those variables are maliciously crafted. While the intent appears to be credential management, the implementation is insecure.