← 返回 Skills 市场
311
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install xpull
功能描述
Pull tweets, threads, articles, and replies from X/Twitter. FxTwitter API primary (free), Grok x_search fallback (paid).
安全使用建议
This skill appears to do what it says: fx-fetch uses the public FxTwitter proxy (no credentials) and grok-x-search uses your xAI API key and writes a local .grok-state.json to enforce a daily cap. Before installing: (1) consider whether you trust api.fxtwitter.com and the x.ai service; (2) keep XAI_API_KEY private (do not commit a .env with the key into version control); (3) expect Grok calls to incur cost — the README mentions pricing; (4) the script will create .grok-state.json in the project root to track usage; if you want more containment, run it in a sandbox or inspect/run the scripts locally first. The repository URL is declared in metadata — review that upstream source if you need higher assurance.
功能分析
Type: OpenClaw Skill
Name: xpull
Version: 1.0.1
The xpull skill bundle provides legitimate utilities for fetching Twitter/X content using the FxTwitter public API and the xAI Grok API. The scripts (fx-fetch.mjs and grok-x-search.mjs) use standard Node.js HTTPS modules to communicate with official or well-known endpoints (api.fxtwitter.com and api.x.ai) and include a local state management system (.grok-state.json) to enforce daily usage caps. There is no evidence of data exfiltration, unauthorized execution, or prompt injection attempts.
能力评估
Purpose & Capability
Name/description match the included scripts. fx-fetch.mjs contacts api.fxtwitter.com and requires only node; grok-x-search.mjs contacts api.x.ai and requires XAI_API_KEY. Optional GROK_DAILY_CAP is present and used. No unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md instructs running the two included node scripts and documents which calls require the API key. The scripts only read a local .env (optional), write a .grok-state.json next to the repository to enforce a daily cap, and make HTTPS calls to api.fxtwitter.com and api.x.ai. They do not execute shell commands, read other system files, or contact unexpected endpoints.
Install Mechanism
No install spec is provided (instruction-only); requiring node is appropriate for the provided .mjs scripts. Nothing is downloaded from arbitrary URLs or written to unusual system locations by an installer.
Credentials
Only XAI_API_KEY (primary) is required for Grok features; GROK_DAILY_CAP is optional. The requested environment variables align with the documented Grok usage and no unrelated secrets are requested.
Persistence & Privilege
always:false (normal). The script writes a single .grok-state.json in the repository root to track daily usage — limited, local persistence. The skill does not modify other skills or global agent settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install xpull - 安装完成后，直接呼叫该 Skill 的名称或使用
/xpull触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Fix: remove home directory .env scanning — XAI_API_KEY now sourced from env var or cwd .env only. Fix: declare XAI_API_KEY and GROK_DAILY_CAP in skill metadata. Add repository URL.
v0.3.1
xpull 0.3.1
- Clarified routing between FxTwitter API (free) and Grok x_search (paid) with explicit fallback guidance.
- Added detailed script usage instructions for tweets, threads, replies, and search.
- Specified output structure for fx-fetch, listing key returned tweet fields.
- Outlined Grok x_search usage, including model info, cost, and daily cap settings.
- Emphasized security rule: never log or display the xAI API key.
元数据
常见问题
xpull 是什么？
Pull tweets, threads, articles, and replies from X/Twitter. FxTwitter API primary (free), Grok x_search fallback (paid). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 311 次。
如何安装 xpull？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xpull」即可一键安装，无需额外配置。
xpull 是免费的吗？
是的，xpull 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
xpull 支持哪些平台？
xpull 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 xpull？
由 Neo（@sanjeevneo）开发并维护，当前版本 v1.0.1。
推荐 Skills