Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

X Twitter Command Center (Search + Post + Interact)

v1.0.6

Searches and reads X (Twitter): profiles, timelines, mentions, followers, tweet search, trends, lists, communities, and Spaces. Publishes posts, likes/unlike...

0· 90·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for chaimengphp/openclaw-aisa-twitter.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "X Twitter Command Center (Search + Post + Interact)" (chaimengphp/openclaw-aisa-twitter) from ClawHub.
Skill page: https://clawhub.ai/chaimengphp/openclaw-aisa-twitter
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: AISA_API_KEY
Required binaries: curl, python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install openclaw-aisa-twitter

ClawHub CLI

Package manager switcher

npx clawhub@latest install openclaw-aisa-twitter
Security Scan
Capability signals
CryptoCan make purchasesRequires OAuth tokenPosts externally
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description, required binaries (curl, python3), and the single required env var (AISA_API_KEY) align with a Twitter/X read-and-post client that uses an external API (AIsa). The included Python clients implement the advertised read, engagement, and OAuth/posting capabilities.
!
Instruction Scope
The runtime instructions and code will upload local workspace media and user content to an external relay (api.aisa.one) and will request OAuth authorization in the browser so the relay can act on the user's behalf. The SKILL.md and README explain this behavior, but the skill does not declare TWITTER_RELAY_BASE_URL (used by the code) or explicitly call out that attachments and full post content will be transmitted to an external service in the metadata. Agent guardrails are present, but the agent is allowed to perform like/post/follow operations after OAuth — which is expected but increases risk if the relay or API key is untrusted.
Install Mechanism
No install spec; code is instruction-only with Python scripts provided. This is low-risk from an installation perspective (nothing is downloaded at install time), but included code will execute network requests at runtime.
Credentials
Only AISA_API_KEY is declared as required (which the skill uses for authorization). However, the code also reads TWITTER_RELAY_BASE_URL and TWITTER_RELAY_TIMEOUT environment variables (with defaults) but these are not documented in the SKILL metadata; the AISA_API_KEY will be sent as Bearer auth and sometimes included in POST bodies, so the key grants access to the relay endpoints and should be treated as sensitive.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. However, once a user completes OAuth in the browser the relay + API key combination allows the skill (and thus the agent, if invoked) to perform likes, follows, and posts on behalf of the user. Autonomous invocation is allowed by default — that increases blast radius if the agent is authorized and the relay is compromised, so the user should be explicit about authorizing and consider revocation policies.
What to consider before installing
Before installing, confirm you trust the external AIsa relay/service (api.aisa.one): the skill will send your AISA_API_KEY, post text, and any attached media to that service to perform reads, uploads, and OAuth-backed actions. Ask the publisher to document TWITTER_RELAY_BASE_URL explicitly (it's read by the code but not listed in the skill metadata). Understand that after you complete OAuth in the browser the agent+skill can like, follow, or post on your behalf — only authorize if you accept that behavior and have a way to revoke access (or use a scoped/test API key). If you’re unsure about trusting the relay, do not provide your real AISA_API_KEY or complete OAuth until you verify the service/operator.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🐦 Clawdis
Binscurl, python3
EnvAISA_API_KEY
Primary envAISA_API_KEY
latestvk979ryj1bppyv5aekfcr1671a584cv96
90downloads
0stars
1versions
Updated 2w ago
v1.0.6
MIT-0

OpenClaw Twitter 🐦

Twitter/X data access and automation for autonomous agents. Powered by AIsa.

One API key. Full Twitter intelligence.

What Can You Do?

Monitor Influencers

"Get Elon Musk's latest tweets and notify me of any AI-related posts"

Track Trends

"What's trending on Twitter worldwide right now?"

Social Listening

"Search for tweets mentioning our product and analyze sentiment"

Competitor Intel

"Monitor @anthropic and @GoogleAI - alert me on new announcements"

Action Workflows

This file does not define like / unlike / follow / unfollow logic directly.

If the user asks to like, unlike, follow, or unfollow on X/Twitter, handle that workflow with ./references/engage_twitter.md. OAuth Authorization is required and must be obtained from ./references/post_twitter.md before executing.

Posting Workflows

This file does not define publishing logic.

If the user asks to send, publish, or reply, or quote on X/Twitter, handle that workflow with ./references/post_twitter.md.

Quick Start

export AISA_API_KEY="your-key"

Core Capabilities

Read Operations (No Login Required)

User Endpoints

# Get user info
curl "https://api.aisa.one/apis/v1/twitter/user/info?userName=elonmusk" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get user profile about (account country, verification, username changes)
curl "https://api.aisa.one/apis/v1/twitter/user_about?userName=elonmusk" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Batch get user info by IDs
curl "https://api.aisa.one/apis/v1/twitter/user/batch_info_by_ids?userIds=44196397,123456" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get user's latest tweets
curl "https://api.aisa.one/apis/v1/twitter/user/last_tweets?userName=elonmusk" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get user mentions
curl "https://api.aisa.one/apis/v1/twitter/user/mentions?userName=elonmusk" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get user followers
curl "https://api.aisa.one/apis/v1/twitter/user/followers?userName=elonmusk" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get user followings
curl "https://api.aisa.one/apis/v1/twitter/user/followings?userName=elonmusk" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get user verified followers (requires user_id, not userName)
curl "https://api.aisa.one/apis/v1/twitter/user/verifiedFollowers?user_id=44196397" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Check follow relationship between two users
curl "https://api.aisa.one/apis/v1/twitter/user/check_follow_relationship?source_user_name=elonmusk&target_user_name=BillGates" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Search users by keyword
curl "https://api.aisa.one/apis/v1/twitter/user/search?query=AI+researcher" \
  -H "Authorization: Bearer $AISA_API_KEY"

Tweet Endpoints

# Advanced tweet search (queryType is required: Latest or Top)
curl "https://api.aisa.one/apis/v1/twitter/tweet/advanced_search?query=AI+agents&queryType=Latest" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Search top tweets
curl "https://api.aisa.one/apis/v1/twitter/tweet/advanced_search?query=AI+agents&queryType=Top" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get tweets by IDs (comma-separated)
curl "https://api.aisa.one/apis/v1/twitter/tweets?tweet_ids=1895096451033985024" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get tweet replies
curl "https://api.aisa.one/apis/v1/twitter/tweet/replies?tweetId=1895096451033985024" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get tweet quotes
curl "https://api.aisa.one/apis/v1/twitter/tweet/quotes?tweetId=1895096451033985024" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get tweet retweeters
curl "https://api.aisa.one/apis/v1/twitter/tweet/retweeters?tweetId=1895096451033985024" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get tweet thread context (full conversation thread)
curl "https://api.aisa.one/apis/v1/twitter/tweet/thread_context?tweetId=1895096451033985024" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get article by tweet ID
curl "https://api.aisa.one/apis/v1/twitter/article?tweet_id=1895096451033985024" \
  -H "Authorization: Bearer $AISA_API_KEY"

Trends, Lists, Communities & Spaces

# Get trending topics (worldwide)
curl "https://api.aisa.one/apis/v1/twitter/trends?woeid=1" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get list members
curl "https://api.aisa.one/apis/v1/twitter/list/members?list_id=1585430245762441216" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get list followers
curl "https://api.aisa.one/apis/v1/twitter/list/followers?list_id=1585430245762441216" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get community info
curl "https://api.aisa.one/apis/v1/twitter/community/info?community_id=1708485837274263614" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get community members
curl "https://api.aisa.one/apis/v1/twitter/community/members?community_id=1708485837274263614" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get community moderators
curl "https://api.aisa.one/apis/v1/twitter/community/moderators?community_id=1708485837274263614" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get community tweets
curl "https://api.aisa.one/apis/v1/twitter/community/tweets?community_id=1708485837274263614" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Search tweets from all communities
curl "https://api.aisa.one/apis/v1/twitter/community/get_tweets_from_all_community?query=AI" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Get Space detail
curl "https://api.aisa.one/apis/v1/twitter/spaces/detail?space_id=1dRJZlbLkjexB" \
  -H "Authorization: Bearer $AISA_API_KEY"

Python Client

# User operations
python3 {baseDir}/scripts/twitter_client.py user-info --username elonmusk
python3 {baseDir}/scripts/twitter_client.py user-about --username elonmusk
python3 {baseDir}/scripts/twitter_client.py tweets --username elonmusk
python3 {baseDir}/scripts/twitter_client.py mentions --username elonmusk
python3 {baseDir}/scripts/twitter_client.py followers --username elonmusk
python3 {baseDir}/scripts/twitter_client.py followings --username elonmusk
python3 {baseDir}/scripts/twitter_client.py verified-followers --user-id 44196397
python3 {baseDir}/scripts/twitter_client.py check-follow --source elonmusk --target BillGates

# Search & discovery
python3 {baseDir}/scripts/twitter_client.py search --query "AI agents"
python3 {baseDir}/scripts/twitter_client.py search --query "AI agents" --type Top
python3 {baseDir}/scripts/twitter_client.py user-search --query "AI researcher"
python3 {baseDir}/scripts/twitter_client.py trends --woeid 1

# Tweet operations
python3 {baseDir}/scripts/twitter_client.py detail --tweet-ids 1895096451033985024
python3 {baseDir}/scripts/twitter_client.py replies --tweet-id 1895096451033985024
python3 {baseDir}/scripts/twitter_client.py quotes --tweet-id 1895096451033985024
python3 {baseDir}/scripts/twitter_client.py retweeters --tweet-id 1895096451033985024
python3 {baseDir}/scripts/twitter_client.py thread --tweet-id 1895096451033985024

# List operations
python3 {baseDir}/scripts/twitter_client.py list-members --list-id 1585430245762441216
python3 {baseDir}/scripts/twitter_client.py list-followers --list-id 1585430245762441216

# Community operations
python3 {baseDir}/scripts/twitter_client.py community-info --community-id 1708485837274263614
python3 {baseDir}/scripts/twitter_client.py community-members --community-id 1708485837274263614
python3 {baseDir}/scripts/twitter_client.py community-tweets --community-id 1708485837274263614
python3 {baseDir}/scripts/twitter_client.py community-search --query "AI"

# Engagement operations through the local relay
python3 {baseDir}/scripts/twitter_engagement_client.py list-tweets --user "@elonmusk" --limit 10
python3 {baseDir}/scripts/twitter_engagement_client.py like-latest --user "@elonmusk"
python3 {baseDir}/scripts/twitter_engagement_client.py unlike-latest --user "@elonmusk"
python3 {baseDir}/scripts/twitter_engagement_client.py follow-user --user "@elonmusk"
python3 {baseDir}/scripts/twitter_engagement_client.py unfollow-user --user "@elonmusk"

API Endpoints Reference

Read Endpoints (GET)

EndpointDescriptionKey Params
/twitter/user/infoGet user profileuserName
/twitter/user_aboutGet user profile aboutuserName
/twitter/user/batch_info_by_idsBatch get users by IDsuserIds
/twitter/user/last_tweetsGet user's recent tweetsuserName, cursor
/twitter/user/mentionsGet user mentionsuserName, cursor
/twitter/user/followersGet user followersuserName, cursor
/twitter/user/followingsGet user followingsuserName, cursor
/twitter/user/verifiedFollowersGet verified followersuser_id, cursor
/twitter/user/check_follow_relationshipCheck follow relationshipsource_user_name, target_user_name
/twitter/user/searchSearch users by keywordquery, cursor
/twitter/tweet/advanced_searchAdvanced tweet searchquery, queryType (Latest/Top), cursor
/twitter/tweetsGet tweets by IDstweet_ids (comma-separated)
/twitter/tweet/repliesGet tweet repliestweetId, cursor
/twitter/tweet/quotesGet tweet quotestweetId, cursor
/twitter/tweet/retweetersGet tweet retweeterstweetId, cursor
/twitter/tweet/thread_contextGet tweet thread contexttweetId, cursor
/twitter/articleGet article by tweettweet_id
/twitter/trendsGet trending topicswoeid (1=worldwide)
/twitter/list/membersGet list memberslist_id, cursor
/twitter/list/followersGet list followerslist_id, cursor
/twitter/community/infoGet community infocommunity_id
/twitter/community/membersGet community memberscommunity_id, cursor
/twitter/community/moderatorsGet community moderatorscommunity_id, cursor
/twitter/community/tweetsGet community tweetscommunity_id, cursor
/twitter/community/get_tweets_from_all_communitySearch all community tweetsquery, cursor
/twitter/spaces/detailGet Space detailspace_id

Pricing

APICost
Twitter read query~$0.0004

Every response includes usage.cost and usage.credits_remaining.

Get Started

  1. Sign up at aisa.one
  2. Get your API key
  3. Add credits (pay-as-you-go)
  4. Set environment variable: export AISA_API_KEY="your-key"

Full API Reference

See API Reference for complete endpoint documentation.

Comments

Loading comments...