Twitter Content Generator
v1.0.9AI-powered Twitter/X content generator. Generate engaging tweets, threads, and content strategies using Sloan agent.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill's stated purpose (generate tweets/threads via the Sloan agent) matches the code that spawns the OpenClaw agent and falls back to a local gateway. However, the package also implements pay-per-use billing and includes a hard-coded merchant key by default. While payment handling is plausibly part of a paid skill, embedding a merchant key that causes payments to go to the publisher by default contradicts parts of the README/SKILL.md and is disproportionate without clear user consent.
Instruction Scope
Runtime instructions and code limit operations to: (1) invoking the local 'openclaw' CLI to run the 'sloan' agent, (2) falling back to a local gateway HTTP call, and (3) calling skillpay.me to charge for usage. The instructions do not read arbitrary user files or unrelated environment variables. This scope is coherent with content generation plus payment handling, but the payment behavior needs scrutiny (see environment_proportionality).
Install Mechanism
No install spec is provided (instruction-only skill), which is lower risk. However, the package includes source files and a package-lock.json that resolves many dependencies from a non-standard registry (mirrors.tencentyun.com). Using an alternate/untrusted registry increases supply-chain risk and should be reviewed.
Credentials
Declared environment vars are optional (SKILLPAY_MERCHANT_KEY, OPENCLAW_GATEWAY_TOKEN). The code contains a hard-coded merchant key as a default (sk_91fff75a...), meaning if the user does not set SKILLPAY_MERCHANT_KEY, payments will be sent using that embedded key (likely to the publisher). Documentation is inconsistent: README sometimes claims 'embedded merchant key, no setup required' and elsewhere instructs users to set their own key. Embedding a secret credential in source code and defaulting to it is disproportionate and potentially deceptive.
Persistence & Privilege
The skill does not request elevated platform privileges. always is false, no special persistence or system-wide configuration changes are requested. The skill spawns a local 'openclaw' binary and performs normal HTTP calls for fallback and payments; that behavior is expected for its purpose.
What to consider before installing
This skill will generate tweets but also charges a small fee via skillpay.me. Important things to check before installing or using it:
- The code contains a hard-coded merchant key; if you do not provide SKILLPAY_MERCHANT_KEY, payments may go to the embedded key (likely the publisher). Set SKILLPAY_MERCHANT_KEY to your own merchant key before using the skill if you expect payments to go to your account.
- The README and code contain contradictory statements about whether payments are automatic or require your key — do not assume payments go to your account without verifying the merchant_key value.
- Consider running the skill in test mode (--test) first to avoid charges and confirm behavior.
- Inspect package-lock.json: many dependencies are resolved from a non-standard mirror (mirrors.tencentyun.com). If you will install/run this code, prefer using official registries or re-resolving dependencies from trusted sources.
- If you are not comfortable, fork or obtain the source, remove the embedded merchant key, and/or replace payment calls with a version that requires explicit configuration of your merchant key before any network charge is attempted.
- Low-risk mitigation: run the included tests locally, verify that processPayment requires your key, and monitor network calls (e.g., with a proxy) when you first run the skill.Like a lobster shell, security has layers — review code before you run it.
latest
Twitter/X Content Generator
Generate engaging Twitter/X content with AI. Perfect for content creators, marketers, and social media managers.
Features
- AI Content Generation - Generate tweets, threads, and content strategies
- Multiple Styles - Engaging, professional, casual, witty
- Customizable - Control tone, hashtags, emojis
- Instant Results - Powered by Sloan agent
Usage
# Generate a tweet
twitter-content-generator "AI trends in 2026" --style engaging
# Generate a thread
twitter-content-generator "How to build AI agents" --type thread --length 5
# Generate a content strategy
twitter-content-generator "Remote work tips" --type strategy
Options
| Option | Description | Default |
|---|---|---|
--style | Content style (engaging, professional, casual, witty) | engaging |
--type | Content type (tweet, thread, strategy) | tweet |
--length | Thread length | 5 |
--tone | Tone (professional, casual, provocative) | professional |
--no-hashtags | Disable hashtags | - |
--no-emojis | Disable emojis | - |
Pricing
- Pay per use: 0.002 USDT per generation
Environment Variables
| Variable | Description | Required |
|---|---|---|
SKILLPAY_MERCHANT_KEY | Payment merchant key (optional, embedded key used by default) | No |
OPENCLAW_GATEWAY_TOKEN | Gateway auth token for local API fallback | No |
Requirements
- OpenClaw with Sloan agent (AI columnist)
- OpenClaw Gateway running locally (for API fallback)
About Sloan
Sloan is your AI columnist - a professional content creator specializing in:
- Viral tweets and threads
- Engagement optimization
- Platform-native storytelling
Support
- GitHub: https://github.com/icepopma/twitter-content-generator
- Discord: https://discord.gg/clawd
- Email: icepopma@hotmail.com
License
MIT © Matt
Comments
Loading comments...
