K test

Search X (Twitter) posts using the xAI API. Use when the user wants to find tweets, search X/Twitter, look up what people are saying on X, or find social med...

Security Scan

The skill's code, declared requirements, and runtime instructions match its stated purpose (searching X/Twitter via the xAI Responses API); nothing in the files suggests unexpected credential access or network exfiltration, though there are minor metadata inconsistencies you may want to confirm with the publisher.

Purpose & Capability

The skill implements an X (Twitter) search using the xAI Grok Responses API and only requires python3 and XAI_API_KEY, which is proportional to its stated purpose. Note: registry metadata and the bundled _meta.json disagree on slug/ownerId (skill listed as 'K test' / slug 'k-test' in the registry but _meta.json shows slug 'x-search' and a different ownerId). This mismatch is likely non-malicious (packaging or publishing artifact) but is worth confirming with the publisher.

Instruction Scope

SKILL.md instructs running the included Python script and setting XAI_API_KEY; the code only reads that env var, validates CLI args, builds a request to https://api.x.ai/v1/responses, and prints formatted JSON. It does not read other environment variables, user files, or send data to unexpected endpoints.

Install Mechanism

Install spec only suggests installing Python via Homebrew (formula: python) to provide python3. This is a low-risk, proportional install path for a Python script.

Credentials

The only required environment variable is XAI_API_KEY (declared as the primary credential) which is appropriate for calling the xAI API. The code does not request other secrets or configuration paths.

Persistence & Privilege

The skill is not marked always:true and does not attempt to modify other skills or system-wide settings. It runs on demand and only uses its own runtime resources.

Assessment

This skill appears to do what it claims: it calls the xAI Responses API to search X posts and only needs python3 plus your XAI_API_KEY. Before installing: (1) confirm you trust the publisher (there is a slug/ownerId mismatch between the registry entry and the included _meta.json that could be a packaging artifact), (2) only provide an XAI API key with the minimum necessary scope and rotate/revoke it if you later uninstall the skill, and (3) you can inspect or run the included scripts locally (they are readable) to verify behavior. If you have doubts about the publisher identity, contact them or prefer a skill whose metadata matches exactly.

X Search

Search X (Twitter) posts using the xAI Grok API with real-time access to X content.

Setup

1. Get your API key: https://console.x.ai
2. Set environment variable:

   export XAI_API_KEY="xai-your-key-here"
   

3. Or set skills."x-search".apiKey / skills."x-search".env.XAI_API_KEY in ~/.openclaw/openclaw.json

Usage

python3 {baseDir}/scripts/search.py "what is trending in AI right now"

Useful flags:

# Filter by handles (max 10)
python3 {baseDir}/scripts/search.py --handles jaaneek,OpenClaw "latest posts"

# Exclude handles (max 10)
python3 {baseDir}/scripts/search.py --exclude spambot,crypto_shill "trending AI"

# Date range (YYYY-MM-DD)
python3 {baseDir}/scripts/search.py --from 2026-03-01 --to 2026-03-20 "xAI grok updates"

# Enable image/video understanding in posts
python3 {baseDir}/scripts/search.py --images --video "product demos"

Notes

• Uses the xAI Responses API with x_search tool (Grok performs the search and summarizes results)
• Cannot use --handles and --exclude at the same time
• Results include citations with links to original X posts
• Present results in a readable format with post content, authors, and citations