Xpoz Setup

Set up and authenticate the Xpoz MCP server for social media intelligence. Required by all Xpoz skills. Handles server configuration, OAuth login, and connection verification with minimal user interaction.

This skill appears to do exactly what it says: set up Xpoz OAuth and configure mcporter. Before installing, confirm you trust https://xpoz.ai and that mcporter is the correct, official tool included with your OpenClaw install. Be aware that the OAuth access token will be written into mcporter's configuration (persistent on disk) so if you want to revoke access later, remove the xpoz config entry or revoke the token from Xpoz. On headless servers the skill asks you to paste an authorization code into chat — don't paste any unrelated secrets. If you need stronger guarantees, inspect mcporter's config storage location and verify token handling after setup.

Type: OpenClaw Skill Name: xpoz-setup Version: 1.2.0 The skill bundle is designed to set up and authenticate the Xpoz MCP server using OAuth 2.1 with PKCE. All network calls to `mcp.xpoz.ai` and `www.xpoz.ai`, file system operations (e.g., `~/.cache/xpoz-oauth/state.json`), and command executions (`mcporter`, `python3`, `bash`) are directly related to this stated purpose. The `SKILL.md` instructions for the agent are clear and do not contain any prompt injection attempts to deviate from the task, hide actions, or exfiltrate unrelated data. Security measures like restricted file permissions for temporary state files and not printing access tokens to stdout are observed in `scripts/oauth-remote.sh`. There is no evidence of intentional malicious behavior such as data exfiltration, unauthorized execution, or persistence mechanisms.