AIsa Twitter Engagement Suite

Search X/Twitter profiles, tweets, trends, and OAuth-gated posting through AIsa. Use when: the user needs Twitter research, monitoring, or engagement workflo...

Security Scan

The skill's code, runtime instructions, and declared requirements align with its stated purpose (Twitter/X read, engagement, and OAuth-backed posting via an AIsa relay) and it only requests a single relay API key and python3.

Purpose & Capability

Name/description match the packaged scripts and SKILL.md. The three Python clients implement read APIs, engagement (like/follow) relay actions, and OAuth-based posting. The only required env var is AISA_API_KEY and required binary is python3 — both expected for a relay-backed Twitter client.

Instruction Scope

SKILL.md instructions are scoped to searching, monitoring, and authorized posting. The instructions and reference files explicitly require AISA_API_KEY, call repo-relative scripts, and warn against asking for passwords/cookies. The scripts call the AIsa relay endpoints and only reference local workspace file paths for media uploads (consistent with the posting use case).

Install Mechanism

No install spec is present (instruction-only skill); bundled Python scripts are run directly. Nothing is downloaded or written to system locations by an installer step, so installation risk is low.

Credentials

Only AISA_API_KEY is required and used throughout the code to authenticate to api.aisa.one. No unrelated credentials, secrets, or config paths are requested. The key is the primary credential expected for a relay service.

Persistence & Privilege

The skill is not always-enabled, does not request system-wide configuration changes, and does not modify other skills. It runs as-needed and relies on the provided environment variable.

Assessment

This package is internally consistent, but you should verify you trust the AIsa relay (api.aisa.one) before supplying AISA_API_KEY. Treat the AISA_API_KEY like any secret key — limit its scope/rotation if possible. Review the bundled scripts yourself (they are included) if you need high assurance, and be cautious when allowing the skill to upload local workspace files or open your browser (the code supports --open-browser). If you prefer, create a dedicated, limited-scope AISA key for this skill rather than reusing keys used elsewhere.

Search X/Twitter profiles, tweets, trends, and OAuth-gated posting through AIsa. Use when: the user needs Twitter research, monitoring, or engagement workflows. Supports search, monitoring, and approved posting.

When to use

• The user needs Twitter/X research, monitoring, posting, or engagement workflows.
• The user wants profiles, timelines, trends, lists, communities, or Spaces.
• The user wants approved posting without sharing passwords.

High-Intent Workflows

• Research an account or conversation thread.
• Monitor a keyword, trend, or competitor.
• Authorize and publish a post after explicit approval.

Quick Reference

• python3 scripts/twitter_client.py --help
• python3 scripts/twitter_engagement_client.py --help
• python3 scripts/twitter_oauth_client.py --help

Setup

• AISA_API_KEY is required for AIsa-backed API access.
• Use repo-relative scripts/ paths from the shipped package.
• Prefer explicit CLI auth flags when a script exposes them.

Example Requests

• Research recent AI agent conversations on X
• Search how users are reacting to a product launch on Twitter
• Authorize and publish a short product update post

Guardrails

• Do not ask for passwords, cookies, or browser credentials.
• Do not claim posting succeeded until the API confirms it.
• Return authorization links instead of relying on auto-open behavior.