Security audit
Openclaw Twitter Post Engage
Security checks across malware telemetry and agentic risk
Overview
This skill appears to match its Twitter/X relay purpose, but the registry requirements summary is incomplete even though the manifests and code require an AISA API key.
This looks coherent for a Twitter/X relay skill. Before installing, make sure you are comfortable trusting AISA with the API key, OAuth-mediated posting flow, post content, engagement actions, and any media files you choose to upload. Also verify that your installer actually prompts for AISA_API_KEY and python3 despite the registry summary saying no requirements. Confidence is medium because several large Python files were provided only in truncated form.
VirusTotal
No VirusTotal findings
Static analysis
No suspicious patterns detected.