← 返回 Skills 市场
X Api
作者
lobstergeneralintelligence
· GitHub ↗
· v0.1.0
7849
总下载
45
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install x-api
功能描述
Post to X (Twitter) using the official API with OAuth 1.0a. Use when you need to tweet, post updates, or publish content. Bypasses rate limits and bot detection that affect cookie-based approaches like bird CLI.
安全使用建议
Install only if you want Codex or your agent workflow to be able to post from your X account. Review tweet text before running the command, avoid posting secrets or private information, protect and restrict the X API token file, remove unexpected .x-api.json files from project directories, and consider pinning the npm dependency for reproducible installs.
功能分析
Type: OpenClaw Skill
Name: x-api
Version: 0.1.0
The OpenClaw AgentSkills skill bundle for 'x-api' is benign. Its stated purpose is to post to X (Twitter) using the official API. The `SKILL.md` and `scripts/x-post.mjs` clearly outline the need for X API credentials, which are loaded from environment variables or a designated secrets file (`~/.clawdbot/secrets/x-api.json`). The core script uses the legitimate `twitter-api-v2` library to interact with the X API. There is no evidence of data exfiltration beyond the intended API calls, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or suspicious dependencies.
能力评估
Purpose & Capability
The purpose is coherent and disclosed: posting tweets through the official X API with OAuth credentials. This is account-affecting and may publish content publicly, but that capability matches the stated purpose.
Instruction Scope
Usage examples invoke a direct post command, and the script immediately calls the X API with the provided text. There is no hidden behavior, but users should treat execution as final because there is no preview or confirmation step in the script.
Install Mechanism
Installation uses npm and the purpose-aligned twitter-api-v2 dependency. The dependency is specified with a caret range and no lockfile is included, which is a supply-chain hygiene issue rather than evidence of malicious behavior.
Credentials
Write-capable X API credentials are proportionate for posting. The script reads credentials from environment variables, ~/.clawdbot/secrets/x-api.json, or an undocumented current-directory .x-api.json fallback, so users should check which account credentials are being used.
Persistence & Privilege
No background service, autorun persistence, destructive local mutation, or unrelated privilege escalation was found. Local long-lived token storage is documented for the intended API use.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install x-api - 安装完成后，直接呼叫该 Skill 的名称或使用
/x-api触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
- Initial release of x-api: post tweets to X (Twitter) using the official API with OAuth 1.0a.
- Bypasses rate limits and bot detection—more reliable than cookie-based CLI tools.
- Clear setup instructions for obtaining and configuring API credentials.
- Supports multi-line tweet posts and returns the tweet URL on success.
- Specifies API usage limits, troubleshooting steps, and distinguishes use cases vs. the bird CLI for reading.
元数据
常见问题
X Api 是什么？
Post to X (Twitter) using the official API with OAuth 1.0a. Use when you need to tweet, post updates, or publish content. Bypasses rate limits and bot detection that affect cookie-based approaches like bird CLI. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 7849 次。
如何安装 X Api？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install x-api」即可一键安装，无需额外配置。
X Api 是免费的吗？
是的，X Api 完全免费（开源免费），可自由下载、安装和使用。
X Api 支持哪些平台？
X Api 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 X Api？
由 lobstergeneralintelligence（@lobstergeneralintelligence）开发并维护，当前版本 v0.1.0。
推荐 Skills