X Twitter Command Center (Search + Post)

Search X (Twitter) in real time, extract relevant posts, and publish tweets/replies instantly—perfect for social listening, engagement, and rapid content ops.

Security Scan

The skill largely does what it says (search and post via aisa.one) but it instructs you to transmit full account credentials and proxy credentials to a third‑party service and to pass passwords on the command line, which is a significant privacy/security risk and not clearly justified in the metadata.

Purpose & Capability

Name, description, required binaries (curl, python3), and the single required env var (AISA_API_KEY) align with a client that calls a third‑party Twitter API (api.aisa.one). The included Python client implements the described read and write operations.

Instruction Scope

SKILL.md and the example curl/python calls instruct callers to submit Twitter account credentials (email/password, optional TOTP) and proxy credentials to api.aisa.one for login/posting. Those instructions effectively send sensitive account credentials to a third party without any local OAuth flow or clear warning that credentials will leave the user's environment. It also encourages passing passwords on the command line (exposed in shell history and process lists). The instructions otherwise stay within the stated Twitter search/post scope and do not reference unrelated system files or env vars.

Install Mechanism

There is no install spec (instruction-only), and the only code provided is a Python script included in the package. No network downloads or archive extraction are requested by the skill itself. Running the provided script will make network calls to api.aisa.one as intended.

Credentials

The skill declares a single required env var (AISA_API_KEY), which is appropriate for a third‑party API. However, the runtime flow requires users to provide their Twitter account credentials and proxy credentials (via CLI arguments or JSON bodies) which are not declared as required env vars and which grant another party direct control over the user's account. The skill does not use or request platform-native OAuth tokens for Twitter; instead it centralizes credential submission to aisa.one, which is higher‑risk and not explicitly documented in the metadata.

Persistence & Privilege

always is false and model invocation is not disabled (default). The skill does not request persistent system-wide settings or modify other skills. Autonomous invocation is allowed by default — this increases the impact if credentials are provided, but is not itself a misconfiguration here.

What to consider before installing

This skill calls a third‑party API (api.aisa.one / AIsa) to search and post on X/Twitter. Before installing: - Be aware: to post the skill shows a flow that sends your Twitter email/password (and optional TOTP) and proxy credentials directly to aisa.one. That means you are sharing full account credentials with a third party instead of using an OAuth token. Only proceed if you trust the AIsa service and understand their security/privacy practices. - Avoid passing passwords on the command line (they appear in shell history and process lists). Prefer secure entry methods or ephemeral credentials if possible. - Consider safer alternatives: use official OAuth tokens/keys that give limited scope, or create a dedicated/throwaway account for automation instead of your primary account. - Check AIsa's documentation, privacy policy, and reputation (aisa.one, aisa.mintlify.app). Confirm that the AISA_API_KEY issuer is the same entity and that you trust them to hold credentials. - If you must test, limit risk by using a disposable account and no real credentials or by monitoring account activity and rotating credentials immediately after testing. If you want a higher assurance assessment, provide the full contents of SKILL.md (untruncated) or confirm whether the service supports OAuth-style delegated tokens instead of raw password submission.

OpenClaw Twitter 🐦

Twitter/X data access and automation for autonomous agents. Powered by AIsa.

One API key. Full Twitter intelligence.

🔥 What Can You Do?

Monitor Influencers

"Get Elon Musk's latest tweets and notify me of any AI-related posts"

Track Trends

"What's trending on Twitter worldwide right now?"

Social Listening

"Search for tweets mentioning our product and analyze sentiment"

Automated Engagement

"Like and retweet posts from @OpenAI that mention GPT-5"

Competitor Intel

"Monitor @anthropic and @GoogleAI - alert me on new announcements"

Quick Start

export AISA_API_KEY="your-key"

Core Capabilities

Read Operations (No Login Required)

# Get user info
curl "https://api.aisa.one/apis/v1/twitter/user/info?userName=elonmusk" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get user's latest tweets
curl "https://api.aisa.one/apis/v1/twitter/user/user_last_tweet?userName=elonmusk" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Advanced tweet search (queryType is required: Latest or Top)
curl "https://api.aisa.one/apis/v1/twitter/tweet/advanced_search?query=AI+agents&queryType=Latest" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Search top tweets
curl "https://api.aisa.one/apis/v1/twitter/tweet/advanced_search?query=AI+agents&queryType=Top" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get trending topics (worldwide)
curl "https://api.aisa.one/apis/v1/twitter/trends?woeid=1" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Search users by keyword
curl "https://api.aisa.one/apis/v1/twitter/user/search_user?keyword=AI+researcher" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get tweets by ID
curl "https://api.aisa.one/apis/v1/twitter/tweet/tweetById?tweet_ids=123456789" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get user followers
curl "https://api.aisa.one/apis/v1/twitter/user/user_followers?userName=elonmusk" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get user followings
curl "https://api.aisa.one/apis/v1/twitter/user/user_followings?userName=elonmusk" \
  -H "Authorization: Bearer $AISA_API_KEY"

Write Operations (Requires Login)

⚠️ Warning: Posting requires account login. Use responsibly to avoid rate limits or account suspension.

# Step 1: Login first (async, check status after)
curl -X POST "https://api.aisa.one/apis/v1/twitter/user_login_v3" \
  -H "Authorization: Bearer $AISA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"user_name":"myaccount","email":"[e-mail]","password":"xxx","proxy":"http://user:pass@ip:port"}'

# Step 2: Check login status
curl "https://api.aisa.one/apis/v1/twitter/get_my_x_account_detail_v3?user_name=myaccount" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Send tweet
curl -X POST "https://api.aisa.one/apis/v1/twitter/send_tweet_v3" \
  -H "Authorization: Bearer $AISA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"user_name":"myaccount","text":"Hello from OpenClaw!"}'

# Like a tweet
curl -X POST "https://api.aisa.one/apis/v1/twitter/like_tweet_v3" \
  -H "Authorization: Bearer $AISA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"user_name":"myaccount","tweet_id":"1234567890"}'

# Retweet
curl -X POST "https://api.aisa.one/apis/v1/twitter/retweet_v3" \
  -H "Authorization: Bearer $AISA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"user_name":"myaccount","tweet_id":"1234567890"}'

# Update profile
curl -X POST "https://api.aisa.one/apis/v1/twitter/update_profile_v3" \
  -H "Authorization: Bearer $AISA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"user_name":"myaccount","name":"New Name","bio":"New bio"}'

Python Client

# User operations
python3 {baseDir}/scripts/twitter_client.py user-info --username elonmusk
python3 {baseDir}/scripts/twitter_client.py tweets --username elonmusk
python3 {baseDir}/scripts/twitter_client.py followers --username elonmusk
python3 {baseDir}/scripts/twitter_client.py followings --username elonmusk

# Search & Discovery
python3 {baseDir}/scripts/twitter_client.py search --query "AI agents"
python3 {baseDir}/scripts/twitter_client.py user-search --keyword "AI researcher"
python3 {baseDir}/scripts/twitter_client.py trends --woeid 1

# Post operations (requires login)
python3 {baseDir}/scripts/twitter_client.py login --username myaccount --email [e-mail] --password xxx --proxy "http://user:pass@ip:port"
python3 {baseDir}/scripts/twitter_client.py post --username myaccount --text "Hello!"
python3 {baseDir}/scripts/twitter_client.py like --username myaccount --tweet-id 1234567890
python3 {baseDir}/scripts/twitter_client.py retweet --username myaccount --tweet-id 1234567890

API Endpoints Reference

Endpoint	Method	Description
/twitter/user/info	GET	Get user profile
/twitter/user/user_last_tweet	GET	Get user's recent tweets
/twitter/user/user_followers	GET	Get user followers
/twitter/user/user_followings	GET	Get user followings
/twitter/user/search_user	GET	Search users by keyword
/twitter/tweet/advanced_search	GET	Advanced tweet search
/twitter/tweet/tweetById	GET	Get tweets by IDs
/twitter/trends	GET	Get trending topics
/twitter/user_login_v3	POST	Login to account
/twitter/send_tweet_v3	POST	Send a tweet
/twitter/like_tweet_v3	POST	Like a tweet
/twitter/retweet_v3	POST	Retweet

Pricing

API	Cost
Twitter read query	~$0.0004
Twitter post/like/retweet	~$0.001

Every response includes usage.cost and usage.credits_remaining.

Get Started

1. Sign up at aisa.one
2. Get your API key
3. Add credits (pay-as-you-go)
4. Set environment variable: export AISA_API_KEY="your-key"

Full API Reference

See API Reference for complete endpoint documentation.