Ai Trend Curation
v1.0.0Curate and post AI trend tweets from X (Twitter) with quote suggestions.
⭐ 0· 621·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The skill's stated purpose (curate/post AI tweets to Slack) is plausible, but the metadata and SKILL.md both reference scripts/ai_trends.js and the xurl CLI as required runtime components — yet the registry entry contains no code files or install instructions. That mismatch means the skill cannot perform its stated tasks as provided, and it's unclear where the referenced scripts would come from.
Instruction Scope
SKILL.md explicitly instructs the agent to run node scripts (search, check-recent, format-blocks, mark-posted) and to call 'openclaw message send'. Those instructions are reasonable for the stated purpose, but they depend entirely on missing scripts. There are no instructions that request unrelated system files or extra environment variables, but the missing scripts create ambiguity about what other actions (network calls, credential usage, file I/O) those scripts would perform.
Install Mechanism
No install spec is provided (lowest install risk). However, because there is no install and no included scripts, the skill as-published is non-functional. If an operator later supplies or downloads the referenced scripts from an external source, that download/install step would become the primary risk and must be reviewed.
Credentials
The skill declares no required environment variables or credentials. Posting to Slack is done via the agent's 'openclaw message send' (which uses the environment the agent already has). No unrelated secrets are requested in the manifest or SKILL.md.
Persistence & Privilege
Default privileges (always: false, agent-invocable allowed) are used. The skill does not request permanent presence or attempt to change other skills' configs in the provided materials.
What to consider before installing
Do not install or enable this skill yet. The SKILL.md and metadata expect a Node script (scripts/ai_trends.js) and the xurl CLI, but no such script or install instructions are included in the package — this makes the skill non-functional and ambiguous about what it would actually run. Before proceeding, ask the author for: (1) the repository or source of scripts so you can review them, (2) an install spec or signed release (so you know binaries won't be fetched from untrusted URLs), and (3) details on how it authenticates to X (Twitter) and how Slack posting is authorized. If you obtain the scripts, review them for network endpoints, credential usage, and file I/O (look for code that reads environment variables, shells out to arbitrary commands, or posts to unknown external URLs). Also verify the xurl binary is the legitimate tool you expect. Only install after you can inspect the referenced scripts or are given a trusted upstream source; until then the skill should be considered incomplete and treated with caution.Like a lobster shell, security has layers — review code before you run it.
latestvk976q8wbdfxdsgdzfg4q434zbx81sbrh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🤖 Clawdis
Binsxurl