twitter

Search X (Twitter) in real time, extract relevant posts, and publish tweets/replies instantly—perfect for social listening, engagement, and rapid content ops.

Security Scan

The skill does what it says (search/post to Twitter) and uses a single third-party API key, but it routes all Twitter login and posting through a third-party service (api.aisa.one / SkillBoss) and asks you to supply account passwords and proxy credentials at runtime — a sensitive design decision that isn't fully justified or documented.

Purpose & Capability

Name/description, required binaries (curl, python3), and the declared SKILLBOSS_API_KEY align with the skill's stated Twitter/X search and posting functionality. However, the skill does not use the official Twitter API directly; it proxies requests through a third-party service (api.aisa.one / SkillBoss), which is an important behavior the description doesn't emphasize. Owner/source are unknown, which reduces trust.

Instruction Scope

SKILL.md and the bundled python client instruct the agent/user to perform login operations that send a user's Twitter username, email, and raw password (and an optional proxy with credentials) to https://api.aisa.one endpoints. Transmitting account credentials and proxy credentials to an external aggregator is outside the minimal scope of a simple search/post skill and increases risk of credential exposure or misuse. The instructions also show using CLI args for passwords (which can be recorded in shell history) and provide no guidance about secure handling or storage of these sensitive values.

Install Mechanism

There is no install spec (instruction-only), and the included python script is the only code. No remote downloads or archive extraction are performed by the skill itself, which is low risk from an installation standpoint. The script performs network calls (expected for this functionality).

Credentials

The skill declares a single required env var (SKILLBOSS_API_KEY), which is proportionate for using the SkillBoss API. However, the runtime behavior requires users to provide their Twitter account credentials and potentially proxy credentials (not declared as required env vars). Asking for high-sensitivity items (account password, proxy user:pass) without documenting why OAuth or API tokens can't be used is disproportionate and risky.

Persistence & Privilege

The skill is not 'always' enabled and does not request special installation privileges. Model invocation is allowed (platform default), which means an autonomous agent could log in and post if credentials are provided — a normal platform behavior but one that increases impact because the skill can perform write actions on social accounts.

Scan Findings in Context

[NO_SCAN_FINDINGS] expected: Static pre-scan reported no regex-based findings. The code does make network requests and sends credentials to api.aisa.one, which is expected for a network client but is the primary reason for concern here rather than any flagged patterns.

What to consider before installing

Before installing or using this skill, consider the following: (1) This skill proxies all Twitter/X activity through a third-party service (api.aisa.one / SkillBoss). Only provide your SKILLBOSS_API_KEY if you trust that service. (2) The skill's write operations require supplying your Twitter account email and raw password (and optionally proxy credentials) to that third-party — avoid doing this with your primary account. Prefer OAuth or API-token-based delegation where possible. (3) Passing passwords on the command line can leak via shell history; if you must test, use a disposable account and rotate credentials afterward. (4) If you want to prevent accidental autonomous posting, restrict the agent's ability to invoke the skill or disable autonomous model invocation for flows that perform logins/posts. (5) Verify SkillBoss / aisa.one's privacy and security policies and consider auditing traffic or using an isolated environment before granting any real account credentials.

OpenClaw Twitter 🐦

Twitter/X data access and automation for autonomous agents. Powered by SkillBoss API Hub.

One API key. Full Twitter intelligence.

🔥 What Can You Do?

Monitor Influencers

"Get Elon Musk's latest tweets and notify me of any AI-related posts"

Track Trends

"What's trending on Twitter worldwide right now?"

Social Listening

"Search for tweets mentioning our product and analyze sentiment"

Automated Engagement

"Like and retweet posts from @OpenAI that mention GPT-5"

Competitor Intel

"Monitor @anthropic and @GoogleAI - alert me on new announcements"

Quick Start

export SKILLBOSS_API_KEY="your-key"

Core Capabilities

Read Operations (No Login Required)

# Get user info
curl "https://api.aisa.one/apis/v1/twitter/user/info?userName=elonmusk" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY"

# Get user's latest tweets
curl "https://api.aisa.one/apis/v1/twitter/user/user_last_tweet?userName=elonmusk" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY"

# Advanced tweet search (queryType is required: Latest or Top)
curl "https://api.aisa.one/apis/v1/twitter/tweet/advanced_search?query=AI+agents&queryType=Latest" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY"

# Search top tweets
curl "https://api.aisa.one/apis/v1/twitter/tweet/advanced_search?query=AI+agents&queryType=Top" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY"

# Get trending topics (worldwide)
curl "https://api.aisa.one/apis/v1/twitter/trends?woeid=1" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY"

# Search users by keyword
curl "https://api.aisa.one/apis/v1/twitter/user/search_user?keyword=AI+researcher" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY"

# Get tweets by ID
curl "https://api.aisa.one/apis/v1/twitter/tweet/tweetById?tweet_ids=123456789" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY"

# Get user followers
curl "https://api.aisa.one/apis/v1/twitter/user/user_followers?userName=elonmusk" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY"

# Get user followings
curl "https://api.aisa.one/apis/v1/twitter/user/user_followings?userName=elonmusk" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY"

Write Operations (Requires Login)

⚠️ Warning: Posting requires account login. Use responsibly to avoid rate limits or account suspension.

# Step 1: Login first (async, check status after)
curl -X POST "https://api.aisa.one/apis/v1/twitter/user_login_v3" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"user_name":"myaccount","email":"[e-mail]","password":"xxx","proxy":"http://user:pass@ip:port"}'

# Step 2: Check login status
curl "https://api.aisa.one/apis/v1/twitter/get_my_x_account_detail_v3?user_name=myaccount" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY"

# Send tweet
curl -X POST "https://api.aisa.one/apis/v1/twitter/send_tweet_v3" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"user_name":"myaccount","text":"Hello from OpenClaw!"}'

# Like a tweet
curl -X POST "https://api.aisa.one/apis/v1/twitter/like_tweet_v3" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"user_name":"myaccount","tweet_id":"1234567890"}'

# Retweet
curl -X POST "https://api.aisa.one/apis/v1/twitter/retweet_v3" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"user_name":"myaccount","tweet_id":"1234567890"}'

# Update profile
curl -X POST "https://api.aisa.one/apis/v1/twitter/update_profile_v3" \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"user_name":"myaccount","name":"New Name","bio":"New bio"}'

Python Client

# User operations
python3 {baseDir}/scripts/twitter_client.py user-info --username elonmusk
python3 {baseDir}/scripts/twitter_client.py tweets --username elonmusk
python3 {baseDir}/scripts/twitter_client.py followers --username elonmusk
python3 {baseDir}/scripts/twitter_client.py followings --username elonmusk

# Search & Discovery
python3 {baseDir}/scripts/twitter_client.py search --query "AI agents"
python3 {baseDir}/scripts/twitter_client.py user-search --keyword "AI researcher"
python3 {baseDir}/scripts/twitter_client.py trends --woeid 1

# Post operations (requires login)
python3 {baseDir}/scripts/twitter_client.py login --username myaccount --email [e-mail] --password xxx --proxy "http://user:pass@ip:port"
python3 {baseDir}/scripts/twitter_client.py post --username myaccount --text "Hello!"
python3 {baseDir}/scripts/twitter_client.py like --username myaccount --tweet-id 1234567890
python3 {baseDir}/scripts/twitter_client.py retweet --username myaccount --tweet-id 1234567890

API Endpoints Reference

Endpoint	Method	Description
/twitter/user/info	GET	Get user profile
/twitter/user/user_last_tweet	GET	Get user's recent tweets
/twitter/user/user_followers	GET	Get user followers
/twitter/user/user_followings	GET	Get user followings
/twitter/user/search_user	GET	Search users by keyword
/twitter/tweet/advanced_search	GET	Advanced tweet search
/twitter/tweet/tweetById	GET	Get tweets by IDs
/twitter/trends	GET	Get trending topics
/twitter/user_login_v3	POST	Login to account
/twitter/send_tweet_v3	POST	Send a tweet
/twitter/like_tweet_v3	POST	Like a tweet
/twitter/retweet_v3	POST	Retweet

Pricing

API	Cost
Twitter read query	~$0.0004
Twitter post/like/retweet	~$0.001

Every response includes usage.cost and usage.credits_remaining.

Get Started

1. Sign up at skillbossai.com
2. Get your API key
3. Add credits (pay-as-you-go)
4. Set environment variable: export SKILLBOSS_API_KEY="your-key"

Full API Reference

See API Reference for complete endpoint documentation.