ClawHub

cs

v1.0.0

Search X (Twitter) posts using the xAI API. Use when the user wants to find tweets, search X/Twitter, look up what people are saying on X, or find social med...

⭐ 0· 72·0 current·0 all-time
by@testmsr·duplicate of @perfectworldltd/x-search-1-0-0
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The description, SKILL.md, and code implement an X (Twitter) search using the xAI Responses (grok) API. The required binary (python3) and required env var (XAI_API_KEY) directly match the implementation. The only notable mismatch is surface-level metadata: the top-level name in the provided registry block is 'cs' while the skill itself identifies as 'x-search' (SKILL.md and _meta.json). Also the registry ownerId differs from _meta.json ownerId; this is likely a packaging/metadata issue rather than functional misalignment.
✓
Instruction Scope
SKILL.md instructs the agent to run the included Python script and to set XAI_API_KEY; the scripts only read that env var and perform an HTTPS POST to the xAI API. The instructions do not ask the agent to read unrelated system files, other env vars, or to send data to third-party endpoints beyond api.x.ai. The code does not perform file exfiltration or broad system scanning.
✓
Install Mechanism
Install spec is a single Homebrew formula (python) to provide python3. This is a low-risk, standard approach; there are no arbitrary URL downloads or archive extraction steps.
✓
Credentials
Only XAI_API_KEY is required (declared as primaryEnv) which is appropriate for calling the xAI Responses API. SKILL.md also mentions optional configuration in ~/.openclaw/openclaw.json, which is reasonable for skill config. No unrelated secrets or multiple credentials are requested.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and does not require elevated or persistent system privileges. Autonomous invocation (disable-model-invocation=false) is the platform default and not by itself concerning here.
Assessment
This skill appears to do what it says: it runs a local Python script that calls the xAI Responses API using XAI_API_KEY and prints structured results. Before installing, confirm you trust the publisher (metadata shows inconsistent ownerId/slug/name entries), and ensure you only provide an XAI_API_KEY with the permissions you intend. If you have regulatory or privacy concerns about sending queries to xAI, review the code (scripts/search.py) yourself — it only posts to https://api.x.ai/v1/responses and does not exfiltrate other local data. If the metadata mismatch worries you, ask the publisher to clarify ownership/slug/name before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97327nw29s2kesyxgpwdyhr2183thxb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

𝕏 Clawdis
Binspython3
EnvXAI_API_KEY
Primary envXAI_API_KEY

Install

Install Python (brew)
Bins: python3
brew install python

Comments