X Twitter Collector

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only X/Twitter collection skill, but it may use a logged-in browser profile and full-page screenshots, so users should be mindful of what account context and page content are captured.

Before installing or using it, understand that it may operate through your logged-in X browser profile and save full-page screenshots/reports locally. Use it only for public accounts, consider a dedicated browser profile, and review screenshots before sharing them.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may browse X while logged in as you, which can expose account-specific page state during screenshots or collection, although the artifacts do not show account mutation or credential export.

Why it was flagged

The skill may use the user's existing OpenClaw browser profile and logged-in X account to access content; this is expected for the stated purpose but is still authenticated-session use.

Skill content
X 账号登录:建议登录 X 账号以获取完整内容(未登录可能有内容限制); browser.start({ profile: "openclaw" })
Recommendation

Use it only with an X account/browser profile you are comfortable using for collection, preferably a dedicated profile if privacy matters, and avoid using it for protected or private accounts.

What this means

Reports or attachments could include incidental page elements from the logged-in X session, such as sidebars or account-specific interface details.

Why it was flagged

The skill uses browser automation, JavaScript page scrolling, and full-page screenshots. These are purpose-aligned for collecting tweets, but they can capture more page UI than just tweet text.

Skill content
browser.act({ request: { kind: "evaluate", fn: "window.scrollTo(0, document.body.scrollHeight)" } }); browser.screenshot({ profile: "openclaw", fullPage: true, ... })
Recommendation

Review generated screenshots before sharing them, and request no screenshots or a simplified/cropped report if you only need tweet text and links.