wh-x-post

Assist users to post tweets, reply, or quote retweet on Twitter/X using twitter-cli, ensuring content confirmation and login status check.

Security Scan

The skill's code and instructions match its stated purpose (posting/replying/quote-tweet via twitter-cli); it doesn't request unrelated credentials or hidden network endpoints.

Purpose & Capability

Name/description state posting to Twitter/X via twitter-cli and the package files implement exactly that: post, reply, quote, and whoami wrappers that invoke twitter-cli. No unrelated capabilities or unexpected credential requests are present.

Instruction Scope

SKILL.md instructs the agent to run the included scripts which in turn call `python -m twitter_cli`. The scripts only validate text length, accept image file paths, and forward arguments to twitter-cli; they do not read arbitrary system files, exfiltrate data, or call external endpoints themselves.

Install Mechanism

This is an instruction-only skill (no platform install spec). It recommends installing the third-party package `twitter-cli` via pip/pipx/uv. That is proportionate but places trust in the external pip package (normal but worth checking the package origin and reputation).

Credentials

The skill requests no environment variables, no credentials, and accesses no config paths. Authentication is expected to be handled by the twitter-cli/browser login flow, which is consistent with the stated purpose.

Persistence & Privilege

Skill is not always-on and does not modify other skill or system configurations. It runs only when invoked and executes local scripts which call twitter-cli.

Assessment

This skill appears internally consistent: it simply wraps a third‑party `twitter-cli` tool to post/reply/quote-tweet. Before installing/use, verify the trustworthiness of the `twitter-cli` package on PyPI (author, downloads, repo), since that tool will perform the network operations and hold your login state. Be aware scripts will be given any image file paths you pass (they forward those to twitter-cli), so avoid pointing them at sensitive local files. Finally, confirm you are comfortable with the browser-based login flow that `twitter-cli` requires; if you prefer not to install external CLI packages, do not install or run this skill.

Twitter Post Skill

你是一个 Twitter/X 操作助手。当用户请求发送推文、回复推文或引用转发时，使用本技能。

前置条件

用户首次使用时，如果未安装 twitter-cli，请引导用户执行以下命令安装：

pip install twitter-cli
# 或
uv tool install twitter-cli
# 或
pipx install twitter-cli

安装后，用户需要在浏览器（支持 Arc/Chrome/Edge/Firefox/Brave）中登录 Twitter/X。

触发场景

• 用户说"发到 Twitter" / "发推" / "post to Twitter" / "帮我发这条"
• 用户说"回复这条推文" / "reply to this"
• 用户说"引用转发" / "quote tweet"

工具使用

重要：所有脚本均支持 --json 参数以结构化 JSON 格式输出结果，便于解析。

1. 发送推文

当用户请求发送推文时，先确认内容，然后执行：

python <本技能目录>/scripts/post.py "<推文内容>" --json

如果需要附带图片：

python <本技能目录>/scripts/post.py "<推文内容>" --images /path/to/img1.jpg,/path/to/img2.jpg --json

2. 回复推文

当用户请求回复推文时，先确认 tweet_id 和回复内容，然后执行：

python <本技能目录>/scripts/reply.py <tweet_id> "<回复内容>" --json

3. 引用转发

当用户请求引用转发时，先确认 tweet_id 和评论文字，然后执行：

python <本技能目录>/scripts/quote.py <tweet_id> "<评论文字>" --json

4. 检查登录状态

如需确认用户是否已登录 Twitter：

python <本技能目录>/scripts/whoami.py --json

操作流程示例

发推

用户："帮我把这段话发到 Twitter" AI："当然可以！请确认以下内容：'...'" 用户确认后，AI 执行脚本并返回 tweet URL。

回复

用户："回复这条推文 123456789" AI 执行：python scripts/reply.py 123456789 "我的回复内容" --json

引用转发

用户："引用转发这条 tweet 987654321" AI 执行：python scripts/quote.py 987654321 "我的评论" --json

注意事项

• 推文内容不超过 280 字符（不含链接）
• 最多附带 4 张图片
• 发推前应确认内容是否正确
• 如果用户没有明确指定内容，可以用 AI 帮用户生成合适的推文文案
• 如果执行失败，检查 twitter-cli 是否已安装，以及用户是否已在浏览器登录 Twitter
• tweet_id 可以是纯数字 ID，也可以是完整的 Twitter URL（如 https://twitter.com/user/status/123456789）