cs

Search X (Twitter) posts using the xAI API. Use when the user wants to find tweets, search X/Twitter, look up what people are saying on X, or find social med...

Security Scan

The skill is internally consistent with its stated purpose (searching X/Twitter via the xAI API), requests only the xAI API key and python3, and contains no suspicious install or runtime behavior — minor metadata inconsistencies are present but not security-critical.

Purpose & Capability

The description, SKILL.md, and code implement an X (Twitter) search using the xAI Responses (grok) API. The required binary (python3) and required env var (XAI_API_KEY) directly match the implementation. The only notable mismatch is surface-level metadata: the top-level name in the provided registry block is 'cs' while the skill itself identifies as 'x-search' (SKILL.md and _meta.json). Also the registry ownerId differs from _meta.json ownerId; this is likely a packaging/metadata issue rather than functional misalignment.

Instruction Scope

SKILL.md instructs the agent to run the included Python script and to set XAI_API_KEY; the scripts only read that env var and perform an HTTPS POST to the xAI API. The instructions do not ask the agent to read unrelated system files, other env vars, or to send data to third-party endpoints beyond api.x.ai. The code does not perform file exfiltration or broad system scanning.

Install Mechanism

Install spec is a single Homebrew formula (python) to provide python3. This is a low-risk, standard approach; there are no arbitrary URL downloads or archive extraction steps.

Credentials

Only XAI_API_KEY is required (declared as primaryEnv) which is appropriate for calling the xAI Responses API. SKILL.md also mentions optional configuration in ~/.openclaw/openclaw.json, which is reasonable for skill config. No unrelated secrets or multiple credentials are requested.

Persistence & Privilege

The skill does not request always:true, does not modify other skills, and does not require elevated or persistent system privileges. Autonomous invocation (disable-model-invocation=false) is the platform default and not by itself concerning here.

Assessment

This skill appears to do what it says: it runs a local Python script that calls the xAI Responses API using XAI_API_KEY and prints structured results. Before installing, confirm you trust the publisher (metadata shows inconsistent ownerId/slug/name entries), and ensure you only provide an XAI_API_KEY with the permissions you intend. If you have regulatory or privacy concerns about sending queries to xAI, review the code (scripts/search.py) yourself — it only posts to https://api.x.ai/v1/responses and does not exfiltrate other local data. If the metadata mismatch worries you, ask the publisher to clarify ownership/slug/name before use.

X Search

Search X (Twitter) posts using the xAI Grok API with real-time access to X content.

Setup

1. Get your API key: https://console.x.ai
2. Set environment variable:

   export XAI_API_KEY="xai-your-key-here"
   

3. Or set skills."x-search".apiKey / skills."x-search".env.XAI_API_KEY in ~/.openclaw/openclaw.json

Usage

python3 {baseDir}/scripts/search.py "what is trending in AI right now"

Useful flags:

# Filter by handles (max 10)
python3 {baseDir}/scripts/search.py --handles jaaneek,OpenClaw "latest posts"

# Exclude handles (max 10)
python3 {baseDir}/scripts/search.py --exclude spambot,crypto_shill "trending AI"

# Date range (YYYY-MM-DD)
python3 {baseDir}/scripts/search.py --from 2026-03-01 --to 2026-03-20 "xAI grok updates"

# Enable image/video understanding in posts
python3 {baseDir}/scripts/search.py --images --video "product demos"

Notes

• Uses the xAI Responses API with x_search tool (Grok performs the search and summarizes results)
• Cannot use --handles and --exclude at the same time
• Results include citations with links to original X posts
• Present results in a readable format with post content, authors, and citations