← 返回 Skills 市场
X Smart Read
作者
Aaron McLachlan
· GitHub ↗
· v2.0.4
575
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install x-smart-read
功能描述
Personal X (Twitter) analytics — timeline engagement, mentions, follower tracking, read any tweet/thread, bookmarks, and combined briefings via X API v2. Cos...
安全使用建议
This package implements X/Twitter analytics and requires your X API credentials, but the skill metadata incorrectly lists no required environment variables — treat that as a red flag. Before installing: (1) verify the source repository (homepage is missing and owner id is opaque); (2) inspect scripts/x_setup.py to confirm how keys are stored and that they are saved only to ~/.openclaw/skills-config/x-twitter/config.json with restrictive permissions; (3) be cautious about running the 'curl | sh' installer for uv — fetch the script and review it before executing; (4) if you allow an AI agent to invoke skills autonomously, consider restricting it from using --no-budget or --force (or remove those flags) to avoid unexpected API spend; (5) if you plan to install, populate credentials manually and confirm config.json contents, or keep credentials out of env if you prefer an alternate secret store. The overall functionality appears legitimate, but the metadata omission and budget-override flags justify caution (suspicious) rather than outright blocking.
功能分析
Type: OpenClaw Skill
Name: x-smart-read
Version: 2.0.4
The OpenClaw AgentSkills skill bundle for X (Twitter) analytics appears benign. All Python scripts (`x_bookmarks.py`, `x_briefing.py`, `x_common.py`, `x_mentions.py`, `x_read.py`, `x_setup.py`, `x_timeline.py`, `x_user.py`) use the `tweepy` library for X API interactions and manage local data within the skill's designated `~/.openclaw/skills-config/x-twitter/` directory. The `SKILL.md` and `AGENTS.md` files contain extensive instructions for the AI agent, all focused on cost optimization and responsible API usage, with no evidence of prompt injection attempts to subvert the agent's behavior. Credentials are handled securely via `~/.openclaw/.env` or interactive prompts, and `config.json` permissions are set to `0o600`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation.
能力评估
Purpose & Capability
The skill's purpose is X (Twitter) analytics and the code and docs clearly require X API credentials (API Key/Secret, Access Token/Secret, Bearer Token) and will store config under ~/.openclaw/skills-config/x-twitter/. However the registry metadata declares no required environment variables or primary credential. That mismatch (declaring 'none' while the scripts and SETUP.md expect and persist five credentials) is a material incoherence and should be resolved before trusting the package.
Instruction Scope
SKILL.md and the scripts are narrowly scoped to calling the X API via tweepy, caching results to a local data directory, and printing summaries. The runtime instructions explicitly warn about costs and include budget guards. Two behavioral notes: (1) the skill provides --force and --no-budget flags that let a caller bypass budget blocking/warnings (so an agent could be instructed to spend freely), and (2) setup imports credentials from ~/.openclaw/.env or prompts interactively and then writes a config.json — this means secrets move onto disk. The scripts do not read unrelated system files or contact unknown external endpoints.
Install Mechanism
There is no formal install spec in the registry (the package is instruction/code-only). The docs instruct users to install 'uv' and show a curl | sh command for uv (https://astral.sh/uv/install.sh). That installer invocation is documented (not executed automatically by the skill) and is a common but higher-risk pattern because it pulls a remote install script. The packaged Python scripts use tweepy and run via 'uv run', which is consistent with the documented workflow.
Credentials
Although the registry lists no required env vars, SETUP.md and the scripts expect and document five X credentials (API Key & Secret, Access Token & Secret, Bearer Token) and a local config file. The skill will store those secrets under ~/.openclaw/skills-config/x-twitter/config.json (SETUP.md says permissions 0600). The omission of these required secrets from metadata is disproportionate and misleading. Also the ability to disable budget checks (--no-budget, --force) increases the risk of unexpected spend if an agent calls the skill autonomously.
Persistence & Privilege
The skill persists data and credentials only under its own directory (~/.openclaw/skills-config/x-twitter/) and the docs state config is saved with restrictive permissions. It does not request always:true and will not be force-included. This is expected for a personal analytics tool. The noteworthy point: stored credentials and cached tweets/mentions/bookmarks are persistent on disk — review config.json and data/ files and ensure filesystem protections meet your security requirements.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install x-smart-read - 安装完成后，直接呼叫该 Skill 的名称或使用
/x-smart-read触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.0.4
x-smart-read 2.0.4 changelog:
- Renamed and rebranded as "x-twitter", reflecting X (Twitter) personal analytics focus.
- Expanded documentation with detailed usage guidelines, cost controls, and agent best practices.
- Clarified command usage, workflow examples, and cost-saving strategies.
- Added explicit instructions for budget modes and spend reporting.
- Enhanced trigger and workflow guidance for specific user intents.
元数据
常见问题
X Smart Read 是什么？
Personal X (Twitter) analytics — timeline engagement, mentions, follower tracking, read any tweet/thread, bookmarks, and combined briefings via X API v2. Cos... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 575 次。
如何安装 X Smart Read？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install x-smart-read」即可一键安装，无需额外配置。
X Smart Read 是免费的吗？
是的，X Smart Read 完全免费（开源免费），可自由下载、安装和使用。
X Smart Read 支持哪些平台？
X Smart Read 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 X Smart Read？
由 Aaron McLachlan（@nevaaron）开发并维护，当前版本 v2.0.4。
推荐 Skills