← Back to Skills Marketplace
Vincent - Twitter
by
Chris Cassano
· GitHub ↗
· v1.0.69
· MIT-0
1056
Downloads
0
Stars
3
Active Installs
21
Versions
Install in OpenClaw
/install vincent-twitter
Description
Twitter/X.com data access for agents. Use this skill when users want to search tweets, look up user profiles, or retrieve recent tweets. Pay-per-call via Vin...
Usage Guidance
This skill appears to do what it claims (use the Vincent proxy to access X/Twitter data). Before installing: (1) understand that runtime 'npx @vincentai/cli@latest' will download and execute npm code — consider pinning to a reviewed version or auditing the CLI on GitHub; (2) confirm you trust heyvincent.ai and their billing/claim workflow (the agent creates a DATA_SOURCES key and returns a claimUrl that the human must claim and fund); (3) review filesystem permissions for ${OPENCLAW_STATE_DIR:-$HOME/.openclaw}/credentials/datasources (or use a dedicated directory) because the secret is persisted there and could be accessible to other processes or skills; (4) if you require stronger isolation, ask for a versioned, audited install method (a fixed npm version or packaged binary) or sandbox the CLI execution. If any of these are unacceptable, do not enable the skill until mitigations are in place.
Capability Analysis
Type: OpenClaw Skill
Name: vincent-twitter
Version: 1.0.69
The skill facilitates Twitter access via a third-party proxy (heyvincent.ai) but incorporates high-risk behaviors, including autonomous crypto wallet signing for credit replenishment and the execution of remote code via 'npx @vincentai/cli@latest' (SKILL.md). While these capabilities are aligned with the stated purpose of an agent-first data source, the ability for an agent to independently sign transactions and pull latest packages from a registry presents a significant security surface. It also requires specific file system access to manage its own credentials in the user's home directory.
Capability Assessment
Purpose & Capability
Name/description (search tweets, user profiles, recent tweets) match the instructions: the SKILL.md exclusively uses the Vincent CLI to list/create a DATA_SOURCES secret and call Twitter endpoints via the Vincent proxy. Declared config paths for storing the datasource key align with this purpose.
Instruction Scope
Runtime instructions are narrowly scoped to creating/listing a DATA_SOURCES secret and invoking twitter search/profile endpoints via 'npx @vincentai/cli' with the returned keyId. The skill does not instruct reading arbitrary user files or unrelated env vars. However, the agent is instructed to execute a remote CLI (npx) at runtime, which grants the package broad discretion to run on the host.
Install Mechanism
There is no static install spec, but the SKILL.md instructs use of 'npx @vincentai/cli@latest' which downloads and executes code from the npm registry at runtime. This is a supply-chain/runtime execution risk: the remote package can change over time and execute arbitrary code when invoked. Consider pinning a specific vetted version or auditing the CLI's source before use.
Credentials
The skill requests no environment variables and the primary credential model is a Vincent-scoped DATA_SOURCES secret (not a Twitter key). It declares the config paths where the key will be persisted (${OPENCLAW_STATE_DIR:-$HOME/.openclaw}/credentials/datasources or ./datasources), which is proportionate to its function. Be aware these are shared config locations — other local tools or skills with access to that directory could potentially read stored secrets if permissions/isolation are not enforced.
Persistence & Privilege
always:false and model invocation enabled is appropriate for this agent-focused, autonomously-invokable skill. The agent can create a datasource secret autonomously, but SKILL.md states calls require the secret to be claimed and credited via the Vincent frontend before API calls succeed, limiting immediate billing risk. There is no 'always:true' or other elevated privilege requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install vincent-twitter - After installation, invoke the skill by name or use
/vincent-twitter - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.69
No changes detected in this version.
- Version remains at 1.0.0.
- No file modifications or updates since the previous release.
v1.0.68
No changes detected in this version.
- Version number updated, but no file changes were made.
- Functionality, documentation, and configuration remain unchanged.
v1.0.66
No changes detected in this version.
- No file or documentation changes were made in version 1.0.66.
v1.0.65
- Broadened allowed Bash tools: now supports Bash(jq:*) and Bash(bc:*) in addition to Bash(npx:@vincentai/cli*).
- Documentation updated to include section on "Adding Credits" with support for autonomous USDC payments via x402 protocol.
- Expanded quick start and error handling instructions for improved agent guidance.
- No functional or API changes; core behavior and endpoints unchanged.
v1.0.64
- No file or documentation changes detected in this release.
- Version number updated to 1.0.64; functionality and documentation remain unchanged.
v1.0.63
vincent-twitter 1.0.63
- No code or documentation changes detected in this release.
- All features, usage instructions, and security models remain unchanged.
v1.0.62
## Vincent-Twitter v1.0.62
- No file changes detected in this release.
- Documentation, configuration, and functionality remain unchanged.
v1.0.61
- Added concise triggers and keywords for agent invocation in the description.
- Introduced metadata: `allowed-tools`, `version`, `author`, and `license` fields.
- Documented output format for tweet search and profile lookups.
- Expanded and clarified error handling with common error causes and resolutions.
- General formatting improvements and minor updates for clarity and consistency.
v1.0.60
- No code or documentation changes detected in this version.
- No new features, fixes, or updates applied.
v1.0.59
No changes detected in this version.
- No file or documentation changes were made in this release.
v1.0.58
No changes detected in this release.
- Version 1.0.58 includes no file or documentation updates.
- Behavior and documentation remain the same as the previous version.
v1.0.54
- No changes detected in this version.
- All features and documentation remain the same as the previous release.
v1.0.48
- No user-facing changes in this release.
- No file changes detected; documentation and functionality remain the same.
v1.0.47
**Command-line CLI usage is now standard for all Twitter/X interactions via Vincent.**
- Replaced raw HTTP examples with comprehensive usage of `@vincentai/cli` for secret management and all Twitter/X API actions.
- CLI handles credential storage and retrieval automatically—no more manual API key or file management.
- Quick-start instructions now guide you through listing, creating, and using `DATA_SOURCES` secrets with CLI commands.
- Updated relinking/recovery process to use the CLI.
- Removed outdated instructions for direct HTTP requests.
v1.0.44
- Updated config path in metadata and documentation to support the `${OPENCLAW_STATE_DIR}` environment variable, falling back to `$HOME/.openclaw` if unset.
- No functional changes to API behavior or endpoints; documentation now reflects the improved path handling for agent credential storage.
v1.0.43
No user-facing changes in this version.
- No file changes detected; SKILL.md remains unchanged.
- No updates to features, configuration, or usage.
v1.0.42
- No changes detected in this release.
- Version number updated to 1.0.42; documentation and functionality remain unchanged.
v1.0.40
Version 1.0.40 of vincent-twitter
- No file changes were detected in this release.
- No updates to skill behavior, documentation, or dependencies.
v1.0.38
- No code or documentation changes detected in this release.
- Skill functionality, configuration, and usage remain unchanged from the previous version.
v1.0.37
- No code or documentation changes detected in this version.
- Functionality, usage instructions, and security details remain unchanged.
- Version update without file modifications.
Metadata
Frequently Asked Questions
What is Vincent - Twitter?
Twitter/X.com data access for agents. Use this skill when users want to search tweets, look up user profiles, or retrieve recent tweets. Pay-per-call via Vin... It is an AI Agent Skill for Claude Code / OpenClaw, with 1056 downloads so far.
How do I install Vincent - Twitter?
Run "/install vincent-twitter" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Vincent - Twitter free?
Yes, Vincent - Twitter is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Vincent - Twitter support?
Vincent - Twitter is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Vincent - Twitter?
It is built and maintained by Chris Cassano (@glitch003); the current version is v1.0.69.
More Skills