← 返回 Skills 市场
X Reader
作者
AgentLinker
· GitHub ↗
· v0.1.0
· MIT-0
287
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install xlink-reader
功能描述
Read and summarize X/Twitter links with low-token routing. Use when a user shares an x.com/twitter.com/t.co link or asks to read, summarize, extract, or insp...
安全使用建议
This skill largely does what it says (reads tweets, threads, and X articles), but there are a few things to check before installing:
- Expectation gap: The script requires an external 'xreach' CLI at runtime but the registry metadata/package.json do not declare or install it; install or inspect xreach yourself before relying on the skill.
- Sensitive data: The skill reads and will write X login cookies at ~/.config/xreader/session.json (and will migrate ~/.config/xfetch/session.json). Only provide cookie files from accounts you are willing to expose to automation — consider a secondary account.
- Playwright: The skill uses Playwright for article extraction; running npm install will fetch Playwright and browser binaries (large, with elevated I/O). Review and run npm install in a controlled environment if you have concerns.
- Verify behavior: Inspect the xreader.mjs script (already included) and the xreach binary source (if you install it) to confirm no unexpected network endpoints or exfiltration. Run the script against a benign public URL in debug mode to observe browser behavior before using private credentials.
If you want to proceed: install Playwright in the skill directory as instructed, separately install/verify xreach, and only point the skill at cookie files from a throwaway/secondary account. If you prefer a simpler approach, prefer a skill that uses only public API endpoints or explicit OAuth tokens rather than file-based cookie migration.
功能分析
Type: OpenClaw Skill
Name: xlink-reader
Version: 0.1.0
The x-reader skill is a utility designed to scrape and summarize X (Twitter) posts and articles. It utilizes a local CLI dependency (xreach) and Playwright for browser automation, handling authentication via session cookies stored in the user's home directory (~/.config/xreader/session.json). The script (scripts/xreader.mjs) includes logic for URL resolution, content extraction, and data normalization, with no evidence of malicious behavior, unauthorized data exfiltration, or prompt injection vulnerabilities.
能力评估
Purpose & Capability
The skill claims to read X/Twitter links and avoid the official API, which fits the included code. However, the runtime spawns an external 'xreach' CLI via execFile('xreach', ...), yet the registry metadata lists no required binaries and the package.json does not install or declare an 'xreach' dependency. SKILL.md does mention 'xreach' as a dependency, but the manifest omission is an incoherence: a user installing this skill must also install/obtain xreach separately for normal operation.
Instruction Scope
The SKILL.md and script instruct the agent to read local auth files (~/.config/xreader/session.json and legacy ~/.config/xfetch/session.json) and migrate/create a session file. Accessing and writing X auth cookies is sensitive but relevant to the stated purpose; however the registry metadata did not declare these required config paths. The script also uses network fetches and Playwright page evaluation (including running a headless/headed browser) which are expected for article extraction but expand the runtime surface.
Install Mechanism
There is no automated install spec in the registry, but SKILL.md explicitly instructs running `npm install` in the skill directory to obtain Playwright. Playwright (and its browsers) are heavyweight but legitimate for article rendering. No downloads from arbitrary URLs are present in the package files; the install flow is manual and documented, which lowers risk but requires user action.
Credentials
The skill requires valid X auth cookies (authToken and ct0) stored in the user's home config paths; this is proportionate to cookie-based scraping but is sensitive. The registry metadata declared no required config paths or credentials, creating a mismatch between what the skill actually needs and what was advertised. No unrelated credentials are requested, but the omission of declared config paths is notable.
Persistence & Privilege
The skill does write its own config (~/.config/xreader/session.json) and will migrate a legacy file if present; it does not request always:true, does not modify other skills or system-wide agent settings, and operates within its own config directory. This is expected behavior for a cookie-using tool.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install xlink-reader - 安装完成后，直接呼叫该 Skill 的名称或使用
/xlink-reader触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
xlink-reader 0.1.0 changelog:
- Initial release of the x-reader skill for reading and summarizing X/Twitter links.
- Supports tweets, threads (with explicit command), and X articles with minimal token usage.
- Smart routing: prefers lightweight xreach for tweets/threads, uses Playwright only for article or t.co links that resolve to articles.
- Requires Node.js, xreach, and valid X auth cookies; no paid API access needed.
- Outputs structured JSON for simple summarization and reliable link handling.
- Includes clear documentation for installation, authentication, usage modes, and output contract.
元数据
常见问题
X Reader 是什么？
Read and summarize X/Twitter links with low-token routing. Use when a user shares an x.com/twitter.com/t.co link or asks to read, summarize, extract, or insp... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 287 次。
如何安装 X Reader？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xlink-reader」即可一键安装，无需额外配置。
X Reader 是免费的吗？
是的，X Reader 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
X Reader 支持哪些平台？
X Reader 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 X Reader？
由 AgentLinker（@zuolicong）开发并维护，当前版本 v0.1.0。
推荐 Skills