X Twitter

X/Twitter manager: post, reply, search, like, retweet & get analytics. Requires: powershell/pwsh. Reads ~/.config/x-twitter/credentials.json (X_API_KEY, X_AP...

This skill appears coherent for managing an X/Twitter account via API using PowerShell and a local credentials file. Before installing: (1) Create a dedicated X Developer App and use app/tokens with the minimum permissions needed (prefer read-only when possible until you need write actions). (2) Store credentials in the indicated file and set strict file permissions (chmod 600 / icacls) as recommended. (3) Treat the access token/secret as sensitive and rotate/revoke them if the host or skill usage is ever suspect. (4) Remember the skill is instruction-only: it relies on the agent's runtime for network calls — only grant it to agents you trust to make requests to api.twitter.com. (5) If you need stronger assurance, review the truncated request examples in SKILL.md (or test in an isolated environment) to confirm all network calls go only to api.twitter.com and that no additional telemetry or external endpoints are used.

Type: OpenClaw Skill Name: x-page Version: 1.0.2 The skill bundle is classified as benign. It provides a well-documented X/Twitter manager skill with clear instructions and PowerShell code snippets for interacting with the X API. All network calls are explicitly directed to `api.twitter.com` and `upload.twitter.com`, as stated in `SKILL.md`. The skill handles sensitive credentials (`~/.config/x-twitter/credentials.json`) but includes security best practices like file permission restrictions and credential rotation advice. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent's intended behavior. The inherent risks of handling credentials and making network calls are necessary for the skill's stated purpose and are accompanied by explicit security assurances.