Twitter Api Alternative
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill may add the mcporter CLI to the user's environment.
The skill depends on installing an external npm package. This is expected for the MCP workflow, but users still need to trust the package source.
"install": [{"id": "node", "kind": "node", "package": "mcporter", "bins": ["mcporter"], "label": "Install mcporter (npm)"}]Install from the expected npm source and keep the package updated; review package provenance if using it in a sensitive environment.
The agent can use the connected Xpoz account to make supported social-search requests.
The skill requires an Xpoz account and OAuth-based setup, even though no Twitter developer account is needed. This is disclosed and purpose-aligned, but it is still delegated account access.
"credentials": "Xpoz account (free tier) — auth via xpoz-setup skill (OAuth 2.1)"
Use the intended Xpoz account, review the permissions during setup, and disconnect access if you no longer need the integration.
Search terms, profile lookups, and generated CSV export workflows may be visible to or handled by the Xpoz service.
The skill sends requests through the Xpoz MCP service. This external provider connection is central to the stated purpose, but user queries and returned export links pass through that service.
"network": ["mcp.xpoz.ai"]
Avoid sending sensitive research queries unless you trust Xpoz's handling of query and export data; review the provider's privacy and retention terms.