X Search 1.0.0
v1.0.0Search X (Twitter) posts using the xAI API. Use when the user wants to find tweets, search X/Twitter, look up what people are saying on X, or find social med...
⭐ 0· 87·2 current·3 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the implemented behavior: the Python script uses the xAI Responses API (x_search tool) to search X content. Required binary (python3) and primaryEnv (XAI_API_KEY) are appropriate and necessary for this functionality.
Instruction Scope
SKILL.md instructs the user to set XAI_API_KEY and run the included script, which is accurate. One minor inconsistency: SKILL.md also suggests storing the key in ~/.openclaw/openclaw.json (skills."x-search".apiKey), but the shipped script only reads XAI_API_KEY from the environment and does not read that config file. Otherwise the runtime instructions are scoped to the stated purpose and do not request access to unrelated files or credentials.
Install Mechanism
Install spec is a single Homebrew formula to install Python (formula: python) which is a well-known package source and proportionate to a Python-based skill. There are no downloads from arbitrary URLs or archive extraction steps.
Credentials
Only a single environment variable is required: XAI_API_KEY (declared as primary credential). That aligns with the skill's need to authenticate to the xAI API. The script does not access other environment variables or unrelated credentials.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide configuration changes. It runs as an on-demand Python script and does not modify other skills or system settings.
Assessment
This skill appears to do what it claims: it sends your search query to the x.ai Responses API using the XAI_API_KEY you provide and prints a JSON summary of results and citations. Things to consider before installing:
- Provide only an XAI API key with appropriate scope/limits and treat it like any other secret; revoke it if you later suspect misuse. The script sends that key to api.x.ai as the Authorization header.
- SKILL.md mentions storing the key in ~/.openclaw/openclaw.json, but the script only reads the XAI_API_KEY environment variable — if you prefer the config file workflow, the code would need modification.
- The included code is small and readable; if you are comfortable reading it, you can verify there are no hidden network endpoints or obfuscated logic.
- The package ownerId in _meta.json differs from the registry owner ID in the provided metadata; this mismatch is not inherently dangerous but worth noting (it may indicate the package was republished or edited).
If any of the above concerns matter for your use case, review or run the script locally with a limited-scope key before adding it to an agent's skillset.Like a lobster shell, security has layers — review code before you run it.
latestvk97afx8kr18vj6kd37rkscw27x83mb0m
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
𝕏 Clawdis
Binspython3
EnvXAI_API_KEY
Primary envXAI_API_KEY
Install
Install Python (brew)
Bins: python3
brew install python