K test
v1.0.0Search X (Twitter) posts using the xAI API. Use when the user wants to find tweets, search X/Twitter, look up what people are saying on X, or find social med...
⭐ 0· 48·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill implements an X (Twitter) search using the xAI Grok Responses API and only requires python3 and XAI_API_KEY, which is proportional to its stated purpose. Note: registry metadata and the bundled _meta.json disagree on slug/ownerId (skill listed as 'K test' / slug 'k-test' in the registry but _meta.json shows slug 'x-search' and a different ownerId). This mismatch is likely non-malicious (packaging or publishing artifact) but is worth confirming with the publisher.
Instruction Scope
SKILL.md instructs running the included Python script and setting XAI_API_KEY; the code only reads that env var, validates CLI args, builds a request to https://api.x.ai/v1/responses, and prints formatted JSON. It does not read other environment variables, user files, or send data to unexpected endpoints.
Install Mechanism
Install spec only suggests installing Python via Homebrew (formula: python) to provide python3. This is a low-risk, proportional install path for a Python script.
Credentials
The only required environment variable is XAI_API_KEY (declared as the primary credential) which is appropriate for calling the xAI API. The code does not request other secrets or configuration paths.
Persistence & Privilege
The skill is not marked always:true and does not attempt to modify other skills or system-wide settings. It runs on demand and only uses its own runtime resources.
Assessment
This skill appears to do what it claims: it calls the xAI Responses API to search X posts and only needs python3 plus your XAI_API_KEY. Before installing: (1) confirm you trust the publisher (there is a slug/ownerId mismatch between the registry entry and the included _meta.json that could be a packaging artifact), (2) only provide an XAI API key with the minimum necessary scope and rotate/revoke it if you later uninstall the skill, and (3) you can inspect or run the included scripts locally (they are readable) to verify behavior. If you have doubts about the publisher identity, contact them or prefer a skill whose metadata matches exactly.Like a lobster shell, security has layers — review code before you run it.
latestvk97ffxmbb6cm1scnes6htt33mh84dwfn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
𝕏 Clawdis
Binspython3
EnvXAI_API_KEY
Primary envXAI_API_KEY
Install
Install Python (brew)
Bins: python3
brew install python