X Thread Reader
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears purpose-aligned: it reads public X/Twitter threads through twitter-thread.com and can save a PDF, with minor notes about external service use and local tool dependencies.
This looks safe for its stated purpose. Before installing, be aware that it sends tweet IDs to twitter-thread.com and that PDF mode depends on local browser tools and writes a local PDF file.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A public tweet/thread ID is sent to a third-party service, and PDF mode can create or overwrite a local PDF file at the chosen path.
The script sends the tweet ID to twitter-thread.com and, in PDF mode, can drive a local browser to create a PDF. This is disclosed and aligned with the skill purpose, but users should notice the network call and file creation.
HTML=$(curl -sL --max-time 30 "$PDF_PAGE_URL") ... "$CHROME" --headless --print-to-pdf="$OUTPUT"
Use it only for threads you are comfortable sending to twitter-thread.com, and choose a safe output path when generating PDFs.
The skill may fail or use whichever local browser/tool is available if these dependencies are missing or unexpected.
The skill relies on local tools, while the registry requirements list no required binaries and there is no install spec. This is a metadata completeness issue rather than hidden behavior.
zero dependencies beyond `curl` and `python3` ... PDF mode: Uses Chrome headless (`--print-to-pdf`) or `agent-browser`
Declare curl, python3, and the optional PDF-generation tools in metadata, and review the included script before use.