X Thread Reader
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: x-thread-reader Version: 1.0.0 The skill is a straightforward utility for fetching and archiving Twitter threads using the third-party service `twitter-thread.com`. It implements text extraction via `curl` and a localized Python regex script, and PDF generation via headless Chrome or `agent-browser`. The code in `scripts/x_thread.sh` includes input validation for tweet IDs, uses safe variable handling in shell commands, and lacks any indicators of data exfiltration, persistence, or malicious intent.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A public tweet/thread ID is sent to a third-party service, and PDF mode can create or overwrite a local PDF file at the chosen path.
The script sends the tweet ID to twitter-thread.com and, in PDF mode, can drive a local browser to create a PDF. This is disclosed and aligned with the skill purpose, but users should notice the network call and file creation.
HTML=$(curl -sL --max-time 30 "$PDF_PAGE_URL") ... "$CHROME" --headless --print-to-pdf="$OUTPUT"
Use it only for threads you are comfortable sending to twitter-thread.com, and choose a safe output path when generating PDFs.
The skill may fail or use whichever local browser/tool is available if these dependencies are missing or unexpected.
The skill relies on local tools, while the registry requirements list no required binaries and there is no install spec. This is a metadata completeness issue rather than hidden behavior.
zero dependencies beyond `curl` and `python3` ... PDF mode: Uses Chrome headless (`--print-to-pdf`) or `agent-browser`
Declare curl, python3, and the optional PDF-generation tools in metadata, and review the included script before use.