X News Crawler

Crawl X (Twitter) search results through a local CLI that wraps `abs` (agent-browser). Use when the user asks to scrape X posts by keyword, collect Top/Lates...

Before installing or running this skill: 1) Understand that the instructions ask you to run Chrome with remote debugging on your regular profile—this can expose your logged-in sessions/cookies to the crawler. Prefer running Chrome with an isolated/test profile unless you explicitly need access to your account. 2) The SKILL.md asks you to run 'pnpm approve-builds -g' and install a global package; review the 'agent-browser-stealth' package source and trustworthiness before approving or installing globally. 3) Note the manifest metadata omits required binaries (scripts require 'abs', 'jq', 'python3'); confirm you trust and control the 'abs' binary being invoked. 4) If you must proceed, run the tool in a controlled environment (throwaway VM/container or isolated browser profile), audit network activity, and avoid exposing sensitive accounts. 5) If you want to be extra safe, ask the author for a signed/verified release of the agent-browser wrapper and for a justification why a regular profile is required and why global pnpm approval is necessary.

Type: OpenClaw Skill Name: x-news-crawler Version: 0.1.1 The skill requires the user to expose their primary Chrome browser profile via the Remote Debugging Port (CDP) and explicitly advises against using an isolated data directory (`--user-data-dir`) in SKILL.md and references/cli.md. This configuration grants the crawler script (scripts/x_news_crawler.sh) and the required 'agent-browser-stealth' package full control over the user's active browser sessions, cookies, and stored credentials. While this is likely intended to bypass X's anti-bot protections by using a logged-in session, it creates a high-risk environment for session hijacking. Additionally, the setup instructions mandate global package installation and bypassing build security prompts ('pnpm approve-builds -g').