← 返回 Skills 市场
lobstergeneralintelligence

X Api

cross-platform ⚠ suspicious
7417
总下载
45
收藏
64
当前安装
1
版本数
在 OpenClaw 中安装
/install x-api
功能描述
Post to X (Twitter) using the official API with OAuth 1.0a. Use when you need to tweet, post updates, or publish content. Bypasses rate limits and bot detection that affect cookie-based approaches like bird CLI.
安全使用建议
Install only if you want an agent to have practical ability to post from your X account. Review every post text yourself before running it, keep X tokens locked down, remove unexpected .x-api.json files from project directories, and consider pinning the npm dependency before use.
功能分析
Type: OpenClaw Skill Name: x-api Version: 0.1.0 The OpenClaw AgentSkills skill bundle for 'x-api' is benign. Its stated purpose is to post to X (Twitter) using the official API. The `SKILL.md` and `scripts/x-post.mjs` clearly outline the need for X API credentials, which are loaded from environment variables or a designated secrets file (`~/.clawdbot/secrets/x-api.json`). The core script uses the legitimate `twitter-api-v2` library to interact with the X API. There is no evidence of data exfiltration beyond the intended API calls, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or suspicious dependencies.
能力评估
Purpose & Capability
The purpose is coherent and disclosed: posting to X through the official API. The capability is high-impact because it publishes public, account-affecting content from the authenticated account.
Instruction Scope
The runtime script posts the provided text immediately via client.v2.tweet(text); the artifacts do not show a preview, dry run, confirmation prompt, or approval gate before posting.
Install Mechanism
Installation is manual and uses the purpose-aligned twitter-api-v2 npm package, but the dependency is specified with a caret range and no lockfile is included in the artifact.
Credentials
Write-capable X API credentials are expected for the skill's purpose, but the script also reads a current-directory .x-api.json credential file that is not documented in the setup instructions, making credential source selection under-disclosed.
Persistence & Privilege
No background service, self-starting persistence, or destructive local mutation was found; however, setup encourages storing long-lived X API tokens locally in ~/.clawdbot/secrets/x-api.json.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install x-api
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /x-api 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
- Initial release of x-api: post tweets to X (Twitter) using the official API with OAuth 1.0a. - Bypasses rate limits and bot detection—more reliable than cookie-based CLI tools. - Clear setup instructions for obtaining and configuring API credentials. - Supports multi-line tweet posts and returns the tweet URL on success. - Specifies API usage limits, troubleshooting steps, and distinguishes use cases vs. the bird CLI for reading.
元数据
Slug x-api
版本 0.1.0
许可证
累计安装 280
当前安装数 64
历史版本数 1
常见问题

X Api 是什么?

Post to X (Twitter) using the official API with OAuth 1.0a. Use when you need to tweet, post updates, or publish content. Bypasses rate limits and bot detection that affect cookie-based approaches like bird CLI. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 7417 次。

如何安装 X Api?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install x-api」即可一键安装,无需额外配置。

X Api 是免费的吗?

是的,X Api 完全免费(开源免费),可自由下载、安装和使用。

X Api 支持哪些平台?

X Api 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 X Api?

由 lobstergeneralintelligence(@lobstergeneralintelligence)开发并维护,当前版本 v0.1.0。

💬 留言讨论