showname

• Risk level: Low
• Analyzed: Apr 21, 2026, 2:31 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, runtime instructions, and required credential (XAI_API_KEY) are coherent with a tool that queries the xAI (Grok) x_search API to find X/Twitter posts.

This skill appears to do exactly what it says: it uses your XAI_API_KEY to call the x.ai Responses API (x_search) and returns summarized results with citations. Before installing, verify you trust the XAI_API_KEY you provide and that the key's permissions are appropriate. Review the included scripts locally if you want to confirm behavior (they're small, well-tested, and validate inputs). Note: the skill will make network calls to api.x.ai when used; do not provide a high-privilege API key if you only need read-only search functionality. Autonomous invocation is allowed by default on the platform (not set to always:true here), so consider whether you want the agent to call this skill without prompting.