TwitterScore

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward TwitterScore API helper, but users should notice that it needs an API key and assumes an external CLI that is not installed or declared by the skill.

This skill looks coherent for TwitterScore research. Before installing, confirm you trust the TwitterScore CLI you will run, use a limited API key, and remember that API queries and exports may consume your service quota or reveal the accounts you analyze to the TwitterScore service.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing or using the skill may give the agent access to a TwitterScore account key, including that account's API quota or paid plan usage.

Why it was flagged

The skill requires a service API key and suggests storing it for reuse, but the registry metadata lists no primary credential or required environment variables.

Skill content
Requires a TwitterScore API key. ... export TWITTERSCORE_API_KEY="your_api_key" ... openclaw config set twitterscore.api_key your_api_key
Recommendation

Use a dedicated, revocable TwitterScore API key, store it only through trusted configuration, and avoid sharing it in prompts or command arguments.

What this means

The skill's safety depends partly on whatever `twitterscore` command is present in the user's environment, which is not reviewed in these artifacts.

Why it was flagged

The provided artifacts do not install or verify the `twitterscore` CLI that SKILL.md repeatedly instructs users to run, creating a provenance gap for the actual executable.

Skill content
No install spec — this is an instruction-only skill.
Recommendation

Before using the commands, verify that the `twitterscore` CLI comes from the intended TwitterScore provider and is installed from a trusted source.