← 返回 Skills 市场
125
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install x-webmcp
功能描述
Connect to X and Grok through the built-in local-mcp X adapter and one fixed UXC link. Use when the user wants to read timelines, inspect tweets, post on X,...
安全使用建议
This skill appears to do what it says (drive X via a local webmcp adapter), but there are a few things to check before installing or enabling it:
- Verify prerequisites yourself: SKILL.md requires 'uxc' and 'npx' on PATH and Playwright browsers installed (npx playwright install). The registry metadata does not list these—ensure they are present and trustworthy.
- Confirm the x-webmcp-cli binary origin: the skill runs that CLI and delegates to webmcp-bridge scripts. Make sure x-webmcp-cli and the referenced webmcp-bridge code come from a source you trust.
- Protect your session data: the skill uses a managed profile path (~/.uxc/webmcp-profile/x). Use a dedicated/isolated profile for this skill (do not point it at your primary browser profile) because the tool can access cookies, tokens, and local files used for uploads.
- Review the repository layout if installing from a package: ensure the referenced sibling scripts (skills/webmcp-bridge/...) exist locally; otherwise the ensure-links.sh wrapper may fail or call unexpected code.
- Be cautious with autonomous invocation: allow_implicit_invocation is enabled; if you permit the agent to call skills autonomously, it could access the local profile without an interactive prompt. If you want stricter control, disable autonomous use or require explicit user confirmation for write actions.
- If you need higher assurance, run the included validate.sh locally (it needs 'rg' / ripgrep) and inspect x-webmcp-cli and webmcp-bridge code before granting it any privileges.
能力评估
Purpose & Capability
The name/description match the instructions: this skill drives X and Grok via a local webmcp adapter. However, the registry metadata lists no required binaries or env vars while SKILL.md explicitly requires 'uxc', 'npx', network access to https://x.com, and Playwright browser installation. The skill also assumes a specific profile path (~/.uxc/webmcp-profile/x) and depends on scripts from a sibling 'webmcp-bridge' skill via a relative path. The missing declared prerequisites and cross-skill repo dependency are inconsistent with the minimal registry metadata.
Instruction Scope
SKILL.md stays on-topic: it tells the agent to verify the x-webmcp-cli presence, check help, inspect auth state, and run read/write commands (with dryRun recommended). It references the local profile (~/.uxc/webmcp-profile/x) and requires absolute local paths for uploads, which is expected for a browser-driven upload tool. There are no instructions to exfiltrate data to unexpected external endpoints.
Install Mechanism
No install spec (instruction-only) and included scripts only call into other local scripts via relative paths; there is no remote download or archive extraction. This is low install risk, but the script dependency on a repository layout (skills/webmcp-bridge) means the skill may be non-functional or rely on externally provided code if that sibling isn't present.
Credentials
The skill declares no required credentials, which is correct for a tool that uses an authenticated local browser profile, but the SKILL.md requires access to the user's X browser profile (~/.uxc/webmcp-profile/x) and local filesystem paths for uploads. Access to that profile can expose session cookies/tokens. Also the runtime prerequisites (uxc, npx, Playwright) are not listed in the registry metadata—this is an omission that should be corrected before trust/installation.
Persistence & Privilege
always:false and user-invocable:true. agents/openai.yaml sets allow_implicit_invocation:true (normal for skills so the agent may call it autonomously). Combined with the skill's access to a local authenticated browser profile, autonomous invocation increases sensitive-asset access surface; users should ensure the profile is isolated and understand what local data the tool will touch.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install x-webmcp - 安装完成后，直接呼叫该 Skill 的名称或使用
/x-webmcp触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Release latest bridge session recovery guidance, X article draft lifecycle support, and Google/Gemini stabilization updates.
v1.0.0
Initial release of x-webmcp skill.
- Enables connecting to X (Twitter) and Grok via a built-in local-mcp X adapter with a fixed UXC link.
- Supports reading timelines, inspecting tweets, posting on X, and chatting with Grok from an authenticated browser profile.
- Provides detailed setup instructions, authentication handling, and workflow examples using `x-webmcp-cli`.
- Includes guidance for file uploads, session management, and safe use of write actions with dry-run capability.
- Isolates X profile by default for safety and reliability.
元数据
常见问题
X Webmcp 是什么？
Connect to X and Grok through the built-in local-mcp X adapter and one fixed UXC link. Use when the user wants to read timelines, inspect tweets, post on X,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 125 次。
如何安装 X Webmcp？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install x-webmcp」即可一键安装，无需额外配置。
X Webmcp 是免费的吗？
是的，X Webmcp 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
X Webmcp 支持哪些平台？
X Webmcp 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 X Webmcp？
由 jolestar（@jolestar）开发并维护，当前版本 v1.0.1。
推荐 Skills