📦 twitter — 技能工具
v1.0.0Search X (Twitter) in real time, extract relevant posts, and publish tweets/replies instantly—perfect for social listening, engagement, and rapid content ops.
0· 24·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill does what it says (search/post to Twitter) and uses a single third-party API key, but it routes all Twitter login and posting through a third-party service (api.aisa.one / SkillBoss) and asks you to supply account passwords and proxy credentials at runtime — a sensitive design decision that isn't fully justified or documented.
评估建议
Before installing or using this skill, consider the following: (1) This skill proxies all Twitter/X activity through a third-party service (api.aisa.one / SkillBoss). Only provide your SKILLBOSS_API_KEY if you trust that service. (2) The skill's write operations require supplying your Twitter account email and raw password (and optionally proxy credentials) to that third-party — avoid doing this with your primary account. Prefer OAuth or API-token-based delegation where possible. (3) Passing pas...详细分析 ▾
ℹ 用途与能力
Name/description, required binaries (curl, python3), and the declared SKILLBOSS_API_KEY align with the skill's stated Twitter/X search and posting functionality. However, the skill does not use the official Twitter API directly; it proxies requests through a third-party service (api.aisa.one / SkillBoss), which is an important behavior the description doesn't emphasize. Owner/source are unknown, which reduces trust.
⚠ 指令范围
SKILL.md and the bundled python client instruct the agent/user to perform login operations that send a user's Twitter username, email, and raw password (and an optional proxy with credentials) to https://api.aisa.one endpoints. Transmitting account credentials and proxy credentials to an external aggregator is outside the minimal scope of a simple search/post skill and increases risk of credential exposure or misuse. The instructions also show using CLI args for passwords (which can be recorded in shell history) and provide no guidance about secure handling or storage of these sensitive values.
✓ 安装机制
There is no install spec (instruction-only), and the included python script is the only code. No remote downloads or archive extraction are performed by the skill itself, which is low risk from an installation standpoint. The script performs network calls (expected for this functionality).
⚠ 凭证需求
The skill declares a single required env var (SKILLBOSS_API_KEY), which is proportionate for using the SkillBoss API. However, the runtime behavior requires users to provide their Twitter account credentials and potentially proxy credentials (not declared as required env vars). Asking for high-sensitivity items (account password, proxy user:pass) without documenting why OAuth or API tokens can't be used is disproportionate and risky.
ℹ 持久化与权限
The skill is not 'always' enabled and does not request special installation privileges. Model invocation is allowed (platform default), which means an autonomous agent could log in and post if credentials are provided — a normal platform behavior but one that increases impact because the skill can perform write actions on social accounts.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/16
- Initial release of Twitter Command Center for real-time X (Twitter) search, posting, and engagement. - Supports influencer monitoring, trend tracking, social listening, competitor intel, and automated engagement. - Provides both read (search, fetch posts/users, trends) and write (tweet, like, retweet, update profile) operations. - Includes detailed API examples and Python client scripts for easy integration. - Requires SKILLBOSS_API_KEY for authentication; posting operations require Twitter/X account login.
● 可疑
安装命令
点击复制官方npx clawhub@latest install godfery-tw
镜像加速npx clawhub@latest install godfery-tw --registry https://cn.longxiaskill.com
技能文档
# OpenClaw Twitter 🐦 Twitter/X data access and automation for autonomous agents. Powered by SkillBoss API Hub. One API key. Full Twitter intelligence.
🔥 What Can You Do?
Monitor Influencers
``
"Get Elon Musk's latest tweets and notify me of any AI-related posts"
`
Track Trends
`
"What's trending on Twitter worldwide right now?"
`
Social Listening
`
"Search for tweets mentioning our product and analyze sentiment"
`
Automated Engagement
`
"Like and retweet posts from @OpenAI that mention GPT-5"
`
Competitor Intel
`
"Monitor @anthropic and @GoogleAI - alert me on new announcements"
`
Quick Start
`bash
export SKILLBOSS_API_KEY="your-key"
`
Core Capabilities
Read Operations (No Login Required)
`bash
# Get user info
curl "https://api.aisa.one/apis/v1/twitter/user/info?userName=elonmusk" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY"
# Get user's latest tweets
curl "https://api.aisa.one/apis/v1/twitter/user/user_last_tweet?userName=elonmusk" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY"
# Advanced tweet search (queryType is required: Latest or Top)
curl "https://api.aisa.one/apis/v1/twitter/tweet/advanced_search?query=AI+agents&queryType=Latest" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY"
# Search top tweets
curl "https://api.aisa.one/apis/v1/twitter/tweet/advanced_search?query=AI+agents&queryType=Top" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY"
# Get trending topics (worldwide)
curl "https://api.aisa.one/apis/v1/twitter/trends?woeid=1" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY"
# Search users by keyword
curl "https://api.aisa.one/apis/v1/twitter/user/search_user?keyword=AI+researcher" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY"
# Get tweets by ID
curl "https://api.aisa.one/apis/v1/twitter/tweet/tweetById?tweet_ids=123456789" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY"
# Get user followers
curl "https://api.aisa.one/apis/v1/twitter/user/user_followers?userName=elonmusk" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY"
# Get user followings
curl "https://api.aisa.one/apis/v1/twitter/user/user_followings?userName=elonmusk" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY"
`
Write Operations (Requires Login)
⚠️ Warning: Posting requires account login. Use responsibly to avoid rate limits or account suspension.
`bash
# Step 1: Login first (async, check status after)
curl -X POST "https://api.aisa.one/apis/v1/twitter/user_login_v3" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY" \
-H "Content-Type: application/json" \
-d '{"user_name":"myaccount","email":"me@example.com","password":"xxx","proxy":"http://user:pass@ip:port"}'
# Step 2: Check login status
curl "https://api.aisa.one/apis/v1/twitter/get_my_x_account_detail_v3?user_name=myaccount" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY"
# Send tweet
curl -X POST "https://api.aisa.one/apis/v1/twitter/send_tweet_v3" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY" \
-H "Content-Type: application/json" \
-d '{"user_name":"myaccount","text":"Hello from OpenClaw!"}'
# Like a tweet
curl -X POST "https://api.aisa.one/apis/v1/twitter/like_tweet_v3" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY" \
-H "Content-Type: application/json" \
-d '{"user_name":"myaccount","tweet_id":"1234567890"}'
# Retweet
curl -X POST "https://api.aisa.one/apis/v1/twitter/retweet_v3" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY" \
-H "Content-Type: application/json" \
-d '{"user_name":"myaccount","tweet_id":"1234567890"}'
# Update profile
curl -X POST "https://api.aisa.one/apis/v1/twitter/update_profile_v3" \
-H "Authorization: Bearer $SKILLBOSS_API_KEY" \
-H "Content-Type: application/json" \
-d '{"user_name":"myaccount","name":"New Name","bio":"New bio"}'
`
Python Client
`bash
# User operations
python3 {baseDir}/scripts/twitter_client.py user-info --username elonmusk
python3 {baseDir}/scripts/twitter_client.py tweets --username elonmusk
python3 {baseDir}/scripts/twitter_client.py followers --username elonmusk
python3 {baseDir}/scripts/twitter_client.py followings --username elonmusk
# Search & Discovery
python3 {baseDir}/scripts/twitter_client.py search --query "AI agents"
python3 {baseDir}/scripts/twitter_client.py user-search --keyword "AI researcher"
python3 {baseDir}/scripts/twitter_client.py trends --woeid 1
# Post operations (requires login)
python3 {baseDir}/scripts/twitter_client.py login --username myaccount --email me@example.com --password xxx --proxy "http://user:pass@ip:port"
python3 {baseDir}/scripts/twitter_client.py post --username myaccount --text "Hello!"
python3 {baseDir}/scripts/twitter_client.py like --username myaccount --tweet-id 1234567890
python3 {baseDir}/scripts/twitter_client.py retweet --username myaccount --tweet-id 1234567890
`
API Endpoints Reference
| Endpoint | Method | Description |
|----------|--------|-------------|
| /twitter/user/info | GET | Get user profile |
| /twitter/user/user_last_tweet | GET | Get user's recent tweets |
| /twitter/user/user_followers | GET | Get user followers |
| /twitter/user/user_followings | GET | Get user followings |
| /twitter/user/search_user | GET | Search users by keyword |
| /twitter/tweet/advanced_search | GET | Advanced tweet search |
| /twitter/tweet/tweetById | GET | Get tweets by IDs |
| /twitter/trends | GET | Get trending topics |
| /twitter/user_login_v3 | POST | Login to account |
| /twitter/send_tweet_v3 | POST | Send a tweet |
| /twitter/like_tweet_v3 | POST | Like a tweet |
| /twitter/retweet_v3 | POST | Retweet |
Pricing
| API | Cost |
|-----|------|
| Twitter read query | ~$0.0004 |
| Twitter post/like/retweet | ~$0.001 |
Every response includes usage.cost and usage.credits_remaining.
Get Started
- Sign up at skillbossai.com
- Get your API key
- Add credits (pay-as-you-go)
Set environment variable:export SKILLBOSS_API_KEY="your-key"`