TwtAPI
v1.2.0Access live Twitter/X data through TwtAPI's hosted public skill gateway. Search tweets, look up users, read timelines, inspect followers and following, fetch...
⭐ 0· 92·0 current·0 all-time
by@tonygjj
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (access Twitter/X via TwtAPI gateway) match the shipped CLI and network calls. The skill only requires python3 and a TwtAPI skill key, which are appropriate for this purpose.
Instruction Scope
SKILL.md stays within the expected scope (run the bundled CLI to call TwtAPI endpoints). It documents an optional TWTAPI_SKILL_BASE_URL you can set to override the gateway; this is reasonable but that optional env var is not listed in the registry metadata (minor inconsistency).
Install Mechanism
Install spec only suggests installing Python via Homebrew (official formula). No downloads from unknown servers or archive extraction; the code file is included in the package.
Credentials
Only one required env var (TWTAPI_SKILL_KEY) is declared and used as the primary credential — proportionate for a hosted gateway. The code and docs also optionally read TWTAPI_SKILL_BASE_URL, but that optional variable is not declared in the registry metadata (documentation/metadata mismatch). No unrelated credentials are requested.
Persistence & Privilege
Skill is not always-enabled and does not request elevated/persistent system privileges. It does network calls to the listed TwtAPI gateway (expected for its function).
Assessment
This skill appears to do what it claims: it runs a small Python CLI that posts queries to TwtAPI's gateway and requires a dedicated TWTAPI_SKILL_KEY. Before installing: 1) Confirm you trust the gateway domain (https://skill.twtapi.com or your self-hosted override) because your queries and the skill key are sent there. 2) Store the TWTAPI_SKILL_KEY securely (env or OpenClaw config) and use least-privilege/rotate keys if possible. 3) Note the minor metadata mismatch: the README/code accept an optional TWTAPI_SKILL_BASE_URL but it isn't declared in the registry metadata — if you plan to override the gateway, set that env var explicitly. 4) If you need extra assurance, review or run the included scripts in an isolated environment and monitor network traffic/credits on your TwtAPI dashboard.Like a lobster shell, security has layers — review code before you run it.
latestvk97f8earaswygp0b4hr37e42mh83ndg6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3
EnvTWTAPI_SKILL_KEY
Primary envTWTAPI_SKILL_KEY
Install
Homebrew
Bins: python3
brew install python