X/Twitter Automation: 30+ APIs, OAuth Post, One Key

• Analyzed: May 12, 2026, 3:26 AM
• Findings: 1
• Version: 1.0.3
• Hash: 7276a550750674c8a8a21e2f3c4d48b5411f49d75ed1c8c8092fbc8f4a607ab3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate integration for reading and posting to Twitter/X via the AIsa API (api.aisa.one). The Python scripts (twitter_client.py and twitter_oauth_client.py) implement standard API interactions, including OAuth authorization flows, media uploads using multipart/form-data, and complex tweet threading logic that respects Twitter's character weighting. The instructions in SKILL.md and references/post_twitter.md are well-structured, providing clear guidance to the agent on handling user requests while explicitly including security guardrails, such as instructing the agent never to ask for user passwords.