X Followings Digest

Auto-fetch latest tweets from your X/Twitter followings and generate structured AI digest. Supports custom time ranges: 1 day, 3 days, 7 days, or custom. 自动抓取X/Twitter关注列表的最新推文，并使用AI分析师提示词生成结构化日报。支持自定义时间段：1天、3天、7天或自定义天数。 **Trigger Words:** - "summarize my followings", "X digest", "Twitter summary", "tweets from last 3 days", "weekly summary" **触发词：** - "总结关注列表", "X日报", "Twitter摘要", "过去3天的推文", "一周摘要" **Prerequisites:** X auth via AUTH_TOKEN & CT0 env vars

Before installing or running this skill, understand: (1) SKILL.md and the included script require two browser session tokens (AUTH_TOKEN and CT0) and the third-party 'bird' CLI — these are not declared in the registry metadata, so the skill will fail without them and you may be surprised to be asked for sensitive tokens. (2) AUTH_TOKEN/CT0 are highly sensitive: anyone with them can perform actions as your account; avoid exposing them to remote/third-party services and don't store them in world-readable files. (3) Prefer safer alternatives: use official API keys with explicit, minimal scopes (if available) or create a dedicated account for scraping. (4) Inspect and verify the 'bird' CLI before installing; only run the script locally on a trusted machine. (5) If you plan to automate (cron), ensure environment variables are stored securely and the machine is trusted. If the publisher updates the registry to explicitly declare dependencies/env vars, documents how 'bird' uses the tokens, or switches to OAuth/app-key-based read-only access, that would reduce risk and could change this assessment.

Type: OpenClaw Skill Name: x-followings-digest Version: 1.1.1 The skill bundle is classified as benign. Its purpose is to fetch tweets using X/Twitter authentication tokens (`AUTH_TOKEN`, `CT0`) and generate an AI-powered digest. The `fetch_followings_tweets.sh` script correctly checks for these environment variables and passes them to the `bird` CLI tool, which is a prerequisite. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent in `SKILL.md` or `analyst_prompt_template.md`. The use of sensitive credentials is inherent to the skill's stated purpose and handled in a standard, non-malicious manner.