Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

ZeeLin Twitter / X 自运营 Skill

v1.0.0

Automate Twitter/X growth tasks including scraping trending topics, generating tweets, posting tweets via browser automation, commenting on follow-back posts...

0· 13·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill claims browser automation (CDP port 9222) and automatic posting, which is plausible for an X automation skill, but the shipped scripts mostly just call macOS 'open' and delegate actual posting to an external script at /Users/youke/.openclaw/workspace/skills/zeelin-twitter-web-autopost/scripts/tweet.sh that is not included or declared. Path references inside SKILL.md (skills/x-auto-growth/...) also do not match the packaged file layout (scripts/...). These mismatches make it unclear whether the skill can perform the claimed automation without other components and create an unexpected dependency on a local, absolute path.
!
Instruction Scope
Runtime instructions and scripts open X URLs and instruct the agent/user to call helper scripts. One helper (post_tweet.sh) invokes an absolute path to another script outside the bundle; that external script would be executed with the agent's privileges if present. SKILL.md also references CDP-driven automation but none of the included scripts configure or connect to CDP. The instructions do not request credentials explicitly, but automatic posting will rely on a browser session or an external script—this is underspecified and potentially dangerous because it executes external code.
Install Mechanism
No install spec (instruction-only plus small bash scripts) — nothing is downloaded or written by an installer. This lowers install-time risk. The scripts themselves are bundled, so there is no network fetch during install, but runtime execution can call external scripts.
!
Credentials
The skill declares no required environment variables or credentials, which is reasonable on its face, but it assumes a very specific local layout (/Users/youke/.openclaw/workspace/...) and a browser session. That absolute path is user-specific and gives the skill implicit reliance on sensitive local files or other skills. The absence of declared credentials combined with instructions to post tweets (which require authentication) is inconsistent — authentication is likely achieved via the browser session or by an undeclared external script.
Persistence & Privilege
The skill does not request always:true and does not try to modify other skills or system-wide config. It just runs scripts and opens URLs, so it has low persistence/privilege requirements in itself.
What to consider before installing
This skill is not clearly self-contained. Before installing or running it: 1) Inspect any external script it calls (notably /Users/youke/.openclaw/workspace/skills/zeelin-twitter-web-autopost/scripts/tweet.sh) — that script will be executed and could run arbitrary commands. 2) Verify why SKILL.md mentions Chrome DevTools/CDP (9222) and whether any component will actually open a CDP socket; if CDP is used, confirm it is configured securely. 3) Don’t run the provided run_x_skill.sh on a machine with sensitive data without first reviewing all referenced scripts and removing or replacing hard-coded absolute paths. 4) Expect manual browser-based authentication (cookies/session) or an undeclared automation tool — the skill does not request API keys but still performs posting. 5) Prefer running in a sandbox or test account, and replace absolute paths with verified, relative paths or explicit configuration. If you cannot locate and review the external tweet.sh and any referenced companion skills, treat this package as untrusted.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b4snm8nsq7x56sefyn2jbps845thq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

ZeeLin Twitter / X 自运营 Skill

AI‑driven Twitter/X growth and content automation skill designed specifically for Tech Twitter and AI communities. It discovers trends, generates tweets, posts them automatically, and performs growth interactions such as commenting and follow‑backs.

This skill consolidates all existing X automation capabilities in the workspace into a single workflow.


Integrated Tools

This skill reuses the following existing components:

Tweet posting

skills/zeelin-twitter-web-autopost/scripts/tweet.sh

Related automation skills

  • zeelin-twitter-web-autopost
  • twitter-x-operations
  • zeelin-x-creator-briefing

Browser automation

Chrome DevTools automation (CDP port 9222).


Core Capabilities

1 Discover AI and Tech Twitter trends

2 Generate high‑engagement AI tweets

3 Automatically post tweets

4 Comment on mutual‑follow / growth threads

5 Follow back new followers

6 Reply to Tech Twitter discussions

7 Quote tweet major AI announcements


Workflow

1 Trend Discovery

Discover trending AI topics from:

  • X search
  • Tech Twitter timeline
  • AI influencers
  • Hacker News

Monitor accounts:

@sama

@OpenAI

@AnthropicAI

@karpathy

@ylecun

@rowancheung

Extract 3‑5 topics such as:

model releases

AI agents

AI startups

research papers

security or alignment news


2 AI Tweet Generation

Generate concise tweets based on trends.

Preferred Tech Twitter structure

Headline

Short explanation

Bullet points

Example

Claude update:

Anthropic may be testing Claude Mythos.

Possible improvements:

• reasoning

• coding

• cybersecurity

This could be a major step forward for AI agents.

Alternative discussion format

If Anthropic ships Claude Mythos it could improve:

• reasoning

• coding reliability

• AI security

Very interesting for agent development.


3 Posting Tweets

Primary command

bash skills/zeelin-twitter-web-autopost/scripts/tweet.sh "tweet text" https://x.com

Uses browser automation to open the compose page and publish.


4 Growth Commenting

Search posts with growth keywords

follow back

mutual follow

let's connect

boost me

AI builders

Example comments

Followed ✅ Let's connect in the AI space.

Just followed. Always great to connect with AI builders.

Following. Excited to connect with people working in AI.

Recommended limit

10‑20 comments per session.

Script helper:

skills/x-auto-growth/scripts/comment_follow_growth.sh

Example command:

bash skills/x-auto-growth/scripts/comment_follow_growth.sh "follow back AI builders"


5 Follow Back Strategy

Check new followers.

Follow back users who recently followed.

Prioritize

AI engineers

AI founders

developers

tech investors

Avoid

spam

crypto bots

low‑quality accounts.


6 Quote Tweet AI News

When important AI news appears

OpenAI announcements

Anthropic releases

major AI research

Quote tweet with commentary.

Example

This could be big for AI agents.

Better reasoning and security is exactly what agent systems need.


7 Tech Twitter Engagement

Reply to discussions about

AI agents

model benchmarks

AI startups

open source AI

Provide thoughtful short replies instead of generic comments.

Example

Agents will need much more reliable reasoning before large‑scale production deployment.


Quote High‑Engagement AI Tweets

Script:

skills/x-auto-growth/scripts/quote_ai_tweet.sh

Command:

bash skills/x-auto-growth/scripts/quote_ai_tweet.sh

This opens high‑engagement AI tweets that can be quote‑tweeted.

Strategy:

1 Find tweets with strong engagement

2 Quote them with insight or commentary

3 Focus on AI builders and developers

Example quote tweet:

Interesting perspective on AI agents.

What matters next:

• reasoning reliability

• tool use

• long context

Agents are getting closer to real‑world deployment.


Safety Limits

To avoid spam detection

Maximum ~20 comments per session

Avoid mass following

Maintain natural posting patterns


Manual Commands

The skill activates when users request:

post an AI tweet

find follow back threads

comment on growth tweets

follow back new followers

run twitter growth

operate X account


One‑Command Quick Mode

The skill supports a shortcut workflow for daily use.

Command:

"post AI trend tweet"

or

"发AI热点推文"

Execution flow:

1 Discover trending AI topic 2 Generate tweet draft 3 Automatically post the tweet

Tweet style:

Short headline

Brief explanation

Optional bullet points

Example output:

AI trend:

Claude‑style reasoning models are improving fast.

Next frontier:

• agent reliability • long‑context reasoning • secure tool use

Interesting moment for AI builders.


AI Trend Auto Tweet

This workflow helps quickly discover AI trends and turn them into a tweet.

Script:

skills/x-auto-growth/scripts/ai_trend_autotweet.sh

Command:

bash skills/x-auto-growth/scripts/ai_trend_autotweet.sh

What it does:

1 Opens X search for AI trend discussions 2 Lets you scan trending tweets 3 Generate a short summary tweet 4 Optionally post it automatically

Example output tweet:

AI trend today:

• new agent frameworks • better reasoning models • open source momentum

AI builders are moving fast.

To post automatically:

bash skills/x-auto-growth/scripts/post_tweet.sh "tweet text"


AI Influencer Digest

Use this helper script to quickly scan leading AI accounts and create a summary tweet.

Script:

skills/x-auto-growth/scripts/ai_influencer_digest.sh

Command:

bash skills/x-auto-growth/scripts/ai_influencer_digest.sh

This opens timelines for:

@sama

@OpenAI

@AnthropicAI

@karpathy

@ylecun

@rowancheung

Review recent posts and generate a short summary tweet describing the main developments in AI today.

Example tweet:

AI update today:

• new model discussions • more work on AI agents • growing open source activity

AI ecosystem is moving fast.


Planned Enhancements

Future scripts may include

trend summarization

batch engagement commenting

quote tweet generation

These are optional extensions and not required for normal operation.

Files

8 total
Select a file
Select a file to preview.

Comments

Loading comments…