X (Twitter) Search by Desearch
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your Desearch API key will be used whenever the skill makes searches, so usage may be tied to your Desearch account and quota.
The script reads a Desearch API key from the environment and sends it as the Authorization header for API requests.
key = os.environ.get("DESEARCH_API_KEY") ... "Authorization": f"{api_key}"Use a dedicated Desearch API key, keep it private, and rotate or revoke it if you no longer use the skill.
Search terms and requested X/Twitter targets are shared with Desearch to perform the lookup.
Search queries, usernames, post IDs, URLs, and filters are sent to Desearch's external API, which is necessary for the advertised service.
DESEARCH_BASE = "https://api.desearch.ai" ... req = Request(url, data=data, headers=headers, method=method)
Avoid sending sensitive search terms unless you are comfortable with Desearch processing them, and review the provider's privacy terms if needed.