X Search

Search X (Twitter) posts using the xAI API. Use when the user wants to find tweets, search X/Twitter, look up what people are saying on X, or find social med...

Security Scan

The skill's code, install steps, and required credential (XAI_API_KEY) align with its stated purpose of querying the xAI/Grok x_search tool and there are no surprising network endpoints, extra credentials, or persistent privileges requested.

Purpose & Capability

Name/description describe searching X via the xAI Grok API; the only required binary is python3 and the only required env var is XAI_API_KEY, which is exactly what the code uses to call https://api.x.ai/v1/responses.

Instruction Scope

SKILL.md instructs running the included Python script or setting XAI_API_KEY in openclaw config; the script only constructs a JSON request to the xAI Responses API, validates flags, and formats the API response. It does not read unrelated files or send data to other endpoints.

Install Mechanism

Install spec is a single brew formula for python (reasonable to provide python3). No downloads from untrusted URLs or archive extraction are present.

Credentials

Only XAI_API_KEY is required and used. The code reads that single env var to set an Authorization Bearer header; no additional secrets or unrelated credentials are requested.

Persistence & Privilege

always is false, no skill-level persistent or system-wide configuration changes are made. The SKILL.md mentions an optional entry in ~/.openclaw/openclaw.json but the code does not automatically modify other skills or global configs.

Assessment

This skill appears to do exactly what it says: it sends search queries to the xAI Responses API (https://api.x.ai/v1/responses) using the XAI_API_KEY you provide. Before installing: (1) verify you trust the x.ai service and the API key you will use (prefer a scoped/read-only key if available); (2) review the included scripts if you want to confirm there are no other network calls (they only call the x.ai endpoint); and (3) be aware that any query you run will be transmitted to x.ai along with your API key in the Authorization header. If you do not trust that endpoint or the key's scope, do not provide your API key.

Search X (Twitter) posts using the xAI Grok API with real-time access to X content.

Setup

1. Get your API key: https://console.x.ai
2. Set environment variable:

   export XAI_API_KEY="xai-your-key-here"
   

3. Or set skills."x-search".apiKey / skills."x-search".env.XAI_API_KEY in ~/.openclaw/openclaw.json

Usage

python3 {baseDir}/scripts/search.py "what is trending in AI right now"

Useful flags:

# Filter by handles (max 10)
python3 {baseDir}/scripts/search.py --handles jaaneek,OpenClaw "latest posts"

# Exclude handles (max 10)
python3 {baseDir}/scripts/search.py --exclude spambot,crypto_shill "trending AI"

# Date range (YYYY-MM-DD)
python3 {baseDir}/scripts/search.py --from 2026-03-01 --to 2026-03-20 "xAI grok updates"

# Enable image/video understanding in posts
python3 {baseDir}/scripts/search.py --images --video "product demos"

Notes

• Uses the xAI Responses API with x_search tool (Grok performs the search and summarizes results)
• Cannot use --handles and --exclude at the same time
• Results include citations with links to original X posts
• Present results in a readable format with post content, authors, and citations