fsdfsdf
v1.0.0Search X (Twitter) posts using the xAI API. Use when the user wants to find tweets, search X/Twitter, look up what people are saying on X, or find social med...
⭐ 0· 45·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The declared functionality (x-search using xAI/Grok) aligns with the required binary (python3), the sole required env var (XAI_API_KEY), the API endpoint (https://api.x.ai/v1/responses), and the included scripts. Small inconsistencies: the top-level skill name is 'fsdfsdf' and slug/owner metadata in the registry differ from the _meta.json ownerId; these are likely packaging/metadata mistakes but worth noting.
Instruction Scope
SKILL.md instructs the user to set XAI_API_KEY or store it in ~/.openclaw/openclaw.json and to run the provided Python script. The runtime instructions and script remain scoped to building a search request, calling the x.ai API, and formatting results. The code does not read unrelated files, other env vars, or transmit data to any endpoints other than api.x.ai.
Install Mechanism
Install spec only offers a Homebrew formula to install Python (formula: python) which is a standard, low-risk approach. There are no arbitrary downloads, extracted archives, or custom binaries created by the installer.
Credentials
The skill requires exactly one credential (XAI_API_KEY) which is necessary and sufficient for authenticating to the xAI Responses API. The code only reads that env var and no other sensitive environment variables or config paths.
Persistence & Privilege
The skill does not request permanent/always inclusion and does not modify other skills or system-wide settings. It suggests storing the API key in ~/.openclaw/openclaw.json as an option (user-config), which is a normal convenience note rather than an auto-persistence action.
Assessment
This skill appears to do what it says: it sends queries to the xAI Responses API and returns formatted search results. Before installing: 1) Confirm you trust the skill publisher or inspect the scripts yourself (scripts/search.py is readable and contains the network call). 2) Be cautious where you store your XAI_API_KEY — placing it in a personal config file (~/.openclaw/openclaw.json) or an env var is convenient but avoid doing so on shared machines. 3) Note the packaging metadata is inconsistent (skill name/slug/owner mismatch) — treat that as a sign the package may not be official and prefer to run the included Python locally after reviewing it. 4) Installing via Homebrew python is low-risk but may upgrade your system Python; review the change before proceeding. If you see additional env vars, remote download URLs, or an 'always: true' flag added later, stop and re-evaluate because those would increase risk.Like a lobster shell, security has layers — review code before you run it.
latestvk9700c4knq0tpc4snmbpv5exqx84s2v8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
𝕏 Clawdis
Binspython3
EnvXAI_API_KEY
Primary envXAI_API_KEY
Install
Install Python (brew)
Bins: python3
brew install python