cleans and optimize Xbio cleaner

X/Twitter CLI for reading, searching, and posting via cookies or Sweetistics.

This skill looks like a wrapper for the 'bird' CLI but has several red flags. Before installing: (1) verify the brew formula source (steipete/tap) on GitHub and read the formula to see what it installs; (2) confirm what the 'bird' binary will do with your browser cookies and where it reads them from — only grant access if you trust it; (3) expect to provide SWEETISTICS_API_KEY if you use that engine, and don't supply secrets unless you trust the service; (4) be wary of the mismatched skill name and unknown homepage — they may indicate sloppy packaging or a misleading listing. If unsure, run the CLI in a sandboxed environment or prefer a skill with explicit declared env/config requirements and a well-known source.

Type: OpenClaw Skill Name: xbio Version: 1.0.0 The skill is suspicious due to two main factors: it instructs the agent to install a third-party CLI tool (`bird`) from an external `brew` tap (`steipete/tap/bird`), introducing a supply chain risk. More critically, the `bird` tool is explicitly stated to access "Browser cookies (default: Firefox/Chrome)" for authentication, which is a high-risk capability involving access to sensitive local data, even if for its stated purpose. While the skill doesn't explicitly instruct the agent to exfiltrate data, it enables a tool with significant access to sensitive information.