Twitter Api Alternative

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent Xpoz/MCP social-media search skill, but users should notice that it depends on an external npm CLI, Xpoz OAuth/account access, and provider-hosted data exports.

This skill appears purpose-aligned and not suspicious from the provided artifacts. Before installing, make sure you are comfortable installing the mcporter npm CLI, connecting an Xpoz account through xpoz-setup, and sending social-media search queries and export workflows to Xpoz.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill may add the mcporter CLI to the user's environment.

Why it was flagged

The skill depends on installing an external npm package. This is expected for the MCP workflow, but users still need to trust the package source.

Skill content
"install": [{"id": "node", "kind": "node", "package": "mcporter", "bins": ["mcporter"], "label": "Install mcporter (npm)"}]
Recommendation

Install from the expected npm source and keep the package updated; review package provenance if using it in a sensitive environment.

What this means

The agent can use the connected Xpoz account to make supported social-search requests.

Why it was flagged

The skill requires an Xpoz account and OAuth-based setup, even though no Twitter developer account is needed. This is disclosed and purpose-aligned, but it is still delegated account access.

Skill content
"credentials": "Xpoz account (free tier) — auth via xpoz-setup skill (OAuth 2.1)"
Recommendation

Use the intended Xpoz account, review the permissions during setup, and disconnect access if you no longer need the integration.

What this means

Search terms, profile lookups, and generated CSV export workflows may be visible to or handled by the Xpoz service.

Why it was flagged

The skill sends requests through the Xpoz MCP service. This external provider connection is central to the stated purpose, but user queries and returned export links pass through that service.

Skill content
"network": ["mcp.xpoz.ai"]
Recommendation

Avoid sending sensitive research queries unless you trust Xpoz's handling of query and export data; review the provider's privacy and retention terms.