Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Grok Twitter Query

Query and summarize Twitter/X information using Grok AI. Use when user asks about Twitter trends, tweets, X platform content, or needs Twitter information su...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 178 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description claim to query Grok for Twitter/X content aligns with the code: the script sends prompts to a Grok-like chat completions endpoint and relies on the model to summarize tweets. However the SKILL.md's statement that 'Grok has real-time access to Twitter/X data' is a model-capability claim (not enforced by the skill) and may be misleading; the skill does not call Twitter APIs itself.
!
Instruction Scope
Instructions are limited to setting GROK_API_KEY/GROK_API_URL/GROK_MODEL and running the script, which is narrow. BUT the SKILL.md and the script default GROK_API_URL to https://api.cheaprouter.club/v1/chat/completions — an unexpected third-party endpoint that instructions encourage users to use unless they override it. That directs user secrets and prompts to an unvetted external host.
Install Mechanism
No install spec; the skill is instruction + a small Python script that uses requests. Nothing is downloaded or written by an installer. This is low-risk from an install perspective.
!
Credentials
The only required secret is GROK_API_KEY, which is proportional for a wrapper that calls a Grok API. However the default GROK_API_URL is a non-official domain: sending your GROK_API_KEY there would expose it to a third party. The skill asks for a key but does not clearly identify the expected provider for that key (official Grok/X endpoint vs third-party relay).
Persistence & Privilege
The skill does not request persistent/always-on privileges, does not modify agent/system configs, and is user-invocable only. No elevated privileges requested.
What to consider before installing
This skill's code is small and does what it says (sends your prompt to a chat-completions endpoint), but the SKILL.md and script default the API URL to a third-party domain (api.cheaprouter.club). Before using: 1) Do not paste production or high-privilege API keys unless you verify the endpoint owner; change GROK_API_URL to the official provider endpoint if you have one. 2) Treat the GROK_API_KEY as sensitive — prefer a throwaway/test key until you confirm the service. 3) Remember the script does not call Twitter APIs itself; it relies on the model to know/lookup real-time Twitter content. 4) If you cannot verify api.cheaprouter.club (ownership, privacy policy, TLS cert), consider editing the script to point to a trusted vendor or decline to install. If you want help identifying the correct official Grok/X API endpoint, provide what provider/key you intend to use and I can help verify it.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk972vyvaefvbkjw6f1esxt0tj982atdk

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Grok Twitter Query

Use Grok AI to query and summarize Twitter/X information.

Setup

Set required environment variables:

export GROK_API_KEY="your-api-key-here"
export GROK_API_URL="https://api.cheaprouter.club/v1/chat/completions"  # optional
export GROK_MODEL="grok-4.20-beta"  # optional

Usage

Run the query script with your Twitter-related prompt:

python3 scripts/query_grok.py "Summarize recent tweets about [topic]"

Examples

# Get trending topics
python3 scripts/query_grok.py "What are the top trending topics on Twitter right now?"

# Summarize tweets about a topic
python3 scripts/query_grok.py "Summarize recent tweets about AI developments"

# Get information about a specific user
python3 scripts/query_grok.py "What has @elonmusk been tweeting about recently?"

Notes

  • Grok has real-time access to Twitter/X data
  • Best for current events and trending information
  • Responses are generated by Grok AI model

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…