Adoption

Agent Skills are supported by leading AI development tools.

VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory

openclaw/x-api

Name: x-api
Author: openclaw

3rdbrain/x-leads-api/SKILL.md

npx skillsauth add openclaw/skills x-api

Clean

TrivyContainer and dependency vulnerability scanner

Clean

SemgrepStatic code analysis for vulnerabilities

Clean

mcp-scan (Snyk)Model Context Protocol security validation

Skipped

Snyk (dep)Open source security scanning

Skipped

Socket.devSupply chain security analysis

Skipped

VirusTotalMulti-engine malware detection

Skipped

CrowdStrikeAdvanced threat intelligence

Skipped

OSV-ScannerOpen Source Vulnerability database check

Skipped

OWASP Dep-Check

X (Twitter) API Skill

CRITICAL: Read This First

You control the X (Twitter) account using the script at /root/.openclaw/skills/x-api/x-api.js.

There is NO twitter command, NO Python, NO pip in this container. Do NOT search for other tools. Do NOT try to use curl with OAuth headers. Do NOT try to install anything.

The ONLY way to post tweets is:

node /root/.openclaw/skills/x-api/x-api.js post "Your tweet text here"

This script handles ALL OAuth 1.0a signing automatically using your configured API keys. Just run it.

Commands

Post a tweet:

node /root/.openclaw/skills/x-api/x-api.js post "Hello world! This is my first tweet."

Post a thread (multiple connected tweets):

node /root/.openclaw/skills/x-api/x-api.js thread "First tweet of thread" "Second tweet continues..." "Third tweet wraps up"

Reply to a tweet:

node /root/.openclaw/skills/x-api/x-api.js reply 1234567890 "This is my reply"

Quote-tweet:

node /root/.openclaw/skills/x-api/x-api.js quote 1234567890 "Interesting take!"

Like a tweet:

node /root/.openclaw/skills/x-api/x-api.js like 1234567890

Delete a tweet:

node /root/.openclaw/skills/x-api/x-api.js delete 1234567890

Check your recent tweets:

node /root/.openclaw/skills/x-api/x-api.js timeline 10

Schedule a tweet for later (saved to queue, posted by cron):

node /root/.openclaw/skills/x-api/x-api.js schedule "Good morning!" "2026-02-22T09:00:00Z"

Schedule a thread for later:

node /root/.openclaw/skills/x-api/x-api.js schedule-thread "Tweet 1" "Tweet 2" "2026-02-22T09:00:00Z"

How It Works

The script uses Node.js built-in crypto module — zero dependencies
OAuth 1.0a HMAC-SHA1 signing is done automatically
API credentials are read from environment variables
Output is JSON with { success: true/false, data: {...}, summary: "..." }

Important Rules

Always use node /root/.openclaw/skills/x-api/x-api.js — this is your Twitter tool
Never try pip install, python, curl with OAuth, or any other method
Tweet text max 280 characters
Thread max 25 tweets
The script returns JSON — check the success field to confirm it worked

Environment Variables

X_API_KEY — X API key (OAuth 1.0a consumer key)
X_API_SECRET — X API secret
X_ACCESS_TOKEN — Access token
X_ACCESS_SECRET — Access token secret

openclaw/x-api

3rdbrain/x-leads-api/SKILL.md

Post tweets, threads, replies, and quote-tweets to X (Twitter) via API v2 with OAuth 1.0a.

3,729 stars

development

Updated Apr 2, 2026

$ install --global

skillsauth

npx skillsauth add openclaw/skills x-api

Install this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.

Security Scan Results

3 of 9 scanners reported clean

Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.

Scanners Passed

Scanners in report

Clean

TrivyContainer and dependency vulnerability scanner

95%

Clean

SemgrepStatic code analysis for vulnerabilities

95%

Clean

mcp-scan (Snyk)Model Context Protocol security validation

95%

Skipped

Snyk (dep)Open source security scanning

50%

Skipped

Socket.devSupply chain security analysis

50%

Skipped

VirusTotalMulti-engine malware detection

50%

Skipped

CrowdStrikeAdvanced threat intelligence

50%

Skipped

OSV-ScannerOpen Source Vulnerability database check

50%

Skipped

OWASP Dep-Check

50%

Last scanned: Apr 3, 2026, 6:57 AM80.4s1 file scanned

SKILL.md

X (Twitter) API Skill

CRITICAL: Read This First

You control the X (Twitter) account using the script at /root/.openclaw/skills/x-api/x-api.js.

There is NO twitter command, NO Python, NO pip in this container. Do NOT search for other tools. Do NOT try to use curl with OAuth headers. Do NOT try to install anything.

The ONLY way to post tweets is:

node /root/.openclaw/skills/x-api/x-api.js post "Your tweet text here"

This script handles ALL OAuth 1.0a signing automatically using your configured API keys. Just run it.

Commands

Post a tweet:

node /root/.openclaw/skills/x-api/x-api.js post "Hello world! This is my first tweet."

Post a thread (multiple connected tweets):

node /root/.openclaw/skills/x-api/x-api.js thread "First tweet of thread" "Second tweet continues..." "Third tweet wraps up"

Reply to a tweet:

node /root/.openclaw/skills/x-api/x-api.js reply 1234567890 "This is my reply"

Quote-tweet:

node /root/.openclaw/skills/x-api/x-api.js quote 1234567890 "Interesting take!"

Like a tweet:

node /root/.openclaw/skills/x-api/x-api.js like 1234567890

Delete a tweet:

node /root/.openclaw/skills/x-api/x-api.js delete 1234567890

Check your recent tweets:

node /root/.openclaw/skills/x-api/x-api.js timeline 10

Schedule a tweet for later (saved to queue, posted by cron):

node /root/.openclaw/skills/x-api/x-api.js schedule "Good morning!" "2026-02-22T09:00:00Z"

Schedule a thread for later:

node /root/.openclaw/skills/x-api/x-api.js schedule-thread "Tweet 1" "Tweet 2" "2026-02-22T09:00:00Z"

How It Works

The script uses Node.js built-in crypto module — zero dependencies
OAuth 1.0a HMAC-SHA1 signing is done automatically
API credentials are read from environment variables
Output is JSON with { success: true/false, data: {...}, summary: "..." }

Important Rules

Always use node /root/.openclaw/skills/x-api/x-api.js — this is your Twitter tool
Never try pip install, python, curl with OAuth, or any other method
Tweet text max 280 characters
Thread max 25 tweets
The script returns JSON — check the success field to confirm it worked

Environment Variables

X_API_KEY — X API key (OAuth 1.0a consumer key)
X_API_SECRET — X API secret
X_ACCESS_TOKEN — Access token
X_ACCESS_SECRET — Access token secret

Related Skills

openclaw/mcdonalds-skill

tools

VerifiedTrustedCommunity

Use when the user wants to connect to, test, or use the McDonalds service at mcp.mcd.cn, including checking authentication, probing MCP endpoints, listing tools, or calling McDonalds MCP tools through a reusable local CLI.

3,962SKILL.mdUpdated Apr 10, 2026

openclaw/mcdonalds-skill

openclaw/scrapebadger

development

VerifiedTrustedCommunity

Web scraping platform — Twitter/X data, Vinted marketplace, and general web scraping API

3,962SKILL.mdUpdated Apr 10, 2026

openclaw/scrapebadger

openclaw/slowmist-security-cc

development

VerifiedTrustedCommunity

SlowMist AI Agent Security Review — comprehensive security framework for skills, repositories, URLs, on-chain addresses, and products (Claude Code version)

3,962SKILL.mdUpdated Apr 10, 2026

openclaw/slowmist-security-cc

openclaw/humanizer-cn

data-ai

VerifiedTrustedCommunity

去除中文文本中的 AI 写作痕迹，使其读起来自然。基于维基百科 AI 写作特征指南，检测 24 种 AI 模式。触发词：humanizer-cn、去除 AI 痕迹、去除 AI 写作痕迹、中文文本人性化。

3,962SKILL.mdUpdated Apr 10, 2026

openclaw/humanizer-cn

Download

For Claude Desktop. Download once, then upload the file in the app — no terminal needed.

Need help? View full Cowork setup guide →

Install manually

Choose your platform

# Clone the repo
git clone https://github.com/openclaw/skills.git

# Copy into Claude Code skills folder (global)
cp -r skills/3rdbrain/x-leads-api ~/.claude/skills/

Claude Code Skills — official skills path docs.

Repository

openclaw/skills

3,729 stars

Compatible with

Claude Code

OpenAI Codex CLI

ChatGPT