X Deep Miner
PassAudited by ClawScan on May 10, 2026.
Overview
The skill is mostly a local scaffold for saving Obsidian notes, with user-directed browser and cron options, and no evidence of exfiltration or destructive behavior.
This appears safe to inspect and run locally, but it is incomplete. Before scheduling it hourly, confirm the output directory, decide whether you are comfortable using a logged-in X browser profile, and verify any future API or LLM integration before adding credentials.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users may expect a fully automatic miner and translator, but the provided code is currently closer to a scaffold/manual workflow.
The reference file discloses that automatic fetching and translation are not fully implemented, while the skill description advertises them as core features.
自动抓取 | ⏳ 需要手动/浏览器 ... 翻译 | ⏳ 需要 LLM API
Treat this as an incomplete helper until you verify the browser/API and translation pieces yourself.
The skill may rely on your logged-in browser session to view X content, which is account-scoped access even though it is purpose-aligned.
If the user follows this workflow, the browser profile may contain a logged-in X/Twitter session used to access the user's timeline.
browser action=start profile=openclaw ... browser action=open targetUrl=https://x.com/home profile=openclaw
Use a dedicated browser profile or account if you do not want the skill operating with your normal X session.
If you add the cron entry, the script will keep running hourly until you remove it.
The skill documents an hourly cron job, which is persistence, but it is clearly shown as a user-configured command rather than installed silently.
crontab -e 0 * * * * cd /path/to && python3 scripts/x_deep_miner.py scan
Only add the cron job intentionally, and remember to remove it if you no longer want automatic scans.