skills/x-post/SKILL.md
# X (Twitter) Post — Post tweets and threads via API Post a single tweet or a thread to X/Twitter using OAuth 1.0a API. ## Trigger When the user asks to post on X, tweet something, create a thread, or share content on Twitter. ## Prerequisites - API keys at `~/.config/x/.env` with these variables: - `X_CONSUMER_KEY` - `X_CONSUMER_SECRET` - `X_ACCESS_TOKEN` - `X_ACCESS_TOKEN_SECRET` - Account: From CLAUDE.md Personal Info (X/Twitter handle) - Permissions: Read and Write - Plan: Pay P
npx skillsauth add razbakov/skills skills/x-postInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Post a single tweet or a thread to X/Twitter using OAuth 1.0a API.
When the user asks to post on X, tweet something, create a thread, or share content on Twitter.
~/.config/x/.env with these variables:
X_CONSUMER_KEYX_CONSUMER_SECRETX_ACCESS_TOKENX_ACCESS_TOKEN_SECRETsource ~/.config/x/.env
python3 << 'PYEOF'
import urllib.request, urllib.parse, hmac, hashlib, base64, time, uuid, json, os
def oauth_sign(method, url, params, ck, cs, tk, ts):
op = {
'oauth_consumer_key': ck,
'oauth_nonce': uuid.uuid4().hex,
'oauth_signature_method': 'HMAC-SHA1',
'oauth_timestamp': str(int(time.time())),
'oauth_token': tk,
'oauth_version': '1.0'
}
all_p = {**op, **params}
sp = '&'.join(f'{urllib.parse.quote(k,"")}'f'={urllib.parse.quote(str(v),"")}' for k,v in sorted(all_p.items()))
bs = f'{method}&{urllib.parse.quote(url,"")}&{urllib.parse.quote(sp,"")}'
sk = f'{urllib.parse.quote(cs,"")}&{urllib.parse.quote(ts,"")}'
sig = base64.b64encode(hmac.new(sk.encode(), bs.encode(), hashlib.sha1).digest()).decode()
op['oauth_signature'] = sig
return 'OAuth ' + ', '.join(f'{urllib.parse.quote(k,"")}="{urllib.parse.quote(v,"")}"' for k,v in sorted(op.items()))
def post_tweet(text, reply_to=None):
url = 'https://api.x.com/2/tweets'
body = {'text': text}
if reply_to:
body['reply'] = {'in_reply_to_tweet_id': reply_to}
data = json.dumps(body).encode()
auth = oauth_sign('POST', url, {},
os.environ['X_CONSUMER_KEY'], os.environ['X_CONSUMER_SECRET'],
os.environ['X_ACCESS_TOKEN'], os.environ['X_ACCESS_TOKEN_SECRET'])
req = urllib.request.Request(url, data=data, headers={
'Authorization': auth,
'Content-Type': 'application/json'
})
resp = urllib.request.urlopen(req)
return json.loads(resp.read())
# Single tweet
result = post_tweet("YOUR_TWEET_TEXT_HERE")
print(json.dumps(result, indent=2))
PYEOF
Post tweets sequentially, each replying to the previous one:
python3 << 'PYEOF'
import urllib.request, urllib.parse, hmac, hashlib, base64, time, uuid, json, os
def oauth_sign(method, url, params, ck, cs, tk, ts):
op = {
'oauth_consumer_key': ck,
'oauth_nonce': uuid.uuid4().hex,
'oauth_signature_method': 'HMAC-SHA1',
'oauth_timestamp': str(int(time.time())),
'oauth_token': tk,
'oauth_version': '1.0'
}
all_p = {**op, **params}
sp = '&'.join(f'{urllib.parse.quote(k,"")}'f'={urllib.parse.quote(str(v),"")}' for k,v in sorted(all_p.items()))
bs = f'{method}&{urllib.parse.quote(url,"")}&{urllib.parse.quote(sp,"")}'
sk = f'{urllib.parse.quote(cs,"")}&{urllib.parse.quote(ts,"")}'
sig = base64.b64encode(hmac.new(sk.encode(), bs.encode(), hashlib.sha1).digest()).decode()
op['oauth_signature'] = sig
return 'OAuth ' + ', '.join(f'{urllib.parse.quote(k,"")}="{urllib.parse.quote(v,"")}"' for k,v in sorted(op.items()))
def post_tweet(text, reply_to=None):
url = 'https://api.x.com/2/tweets'
body = {'text': text}
if reply_to:
body['reply'] = {'in_reply_to_tweet_id': reply_to}
data = json.dumps(body).encode()
auth = oauth_sign('POST', url, {},
os.environ['X_CONSUMER_KEY'], os.environ['X_CONSUMER_SECRET'],
os.environ['X_ACCESS_TOKEN'], os.environ['X_ACCESS_TOKEN_SECRET'])
req = urllib.request.Request(url, data=data, headers={
'Authorization': auth,
'Content-Type': 'application/json'
})
resp = urllib.request.urlopen(req)
return json.loads(resp.read())
tweets = [
"Tweet 1 — the hook",
"Tweet 2 — details",
"Tweet 3 — CTA + link",
]
prev_id = None
for i, text in enumerate(tweets):
result = post_tweet(text, reply_to=prev_id)
tweet_id = result['data']['id']
prev_id = tweet_id
print(f"Tweet {i+1} posted: https://x.com/status/{tweet_id}")
time.sleep(1) # Rate limit buffer
PYEOF
python3 -c "
import urllib.request, urllib.parse, hmac, hashlib, base64, time, uuid, json, os
# ... same oauth_sign function ...
tweet_id = 'TWEET_ID_HERE'
url = f'https://api.x.com/2/tweets/{tweet_id}'
auth = oauth_sign('DELETE', url, {},
os.environ['X_CONSUMER_KEY'], os.environ['X_CONSUMER_SECRET'],
os.environ['X_ACCESS_TOKEN'], os.environ['X_ACCESS_TOKEN_SECRET'])
req = urllib.request.Request(url, method='DELETE', headers={'Authorization': auth})
resp = urllib.request.urlopen(req)
print(json.loads(resp.read()))
"
https://api.x.com/2/~/.config/x/.envtabs_context_mcp) for the browser steps — the user is already signed intools
--- name: handoff description: Get an agent past a browser/UI wall it can't (or must not) cross on its own — a login-gated dashboard, a CAPTCHA, a 2FA prompt, an API that keeps rejecting the write, or an irreversible click that policy says a human must make. This skill is an ESCALATION LADDER, not a first move: it tells you to try the automated browser surfaces FIRST (Chrome-in-Claude, computer-use, an autonomous browser sub-agent) and only fall back to the Handoff app — a wrapper browser that h
documentation
Summarize one or more YouTube videos from their links. Use this whenever the user pastes a youtube.com or youtu.be URL (or several) and wants to know what it's about — phrasings like "summarize to telegram", "tldr these videos", "what do these say", "summary of this talk", or just dropping links with no instruction at all. Fetches each video's real transcript via yt-dlp (not the page text, which never contains the transcript), cleans the captions, and writes a per-video summary. Default delivery is Telegram; honor any other surface the user names ("to my notes", "just here in chat", "email it"). Trigger even when the user only pastes bare links — bare YouTube links almost always mean "tell me what's in these".
data-ai
Daily Digest — Chief-of-Staff role consolidates the six top-managers into one Telegram message to the Commander, instead of six. Implements the protocol from agent-proactivity.md.
development
Seed a new or empty Instagram account with a 9-post grid (3×3) so the profile looks established the moment a new visitor lands. Designed for festivals, new businesses, product launches, conferences, communities — any time an empty IG profile would hurt conversion from external traffic (QR scans, flyer drops, cross-promo). Generates assets via /image-from-gemini (per content-publishing rules — never HTML), writes captions with hashtag sets, and outputs a posting order + cadence plan. Trigger generously: phrases like '9 posts for instagram', 'fill my IG', 'starter grid', 'launch grid', 'instagram seed', '9-post grid', 'IG account not to look empty', 'first instagram posts', 'feed bootstrap', '3x3 grid', 'instagram launch content'. Even if the user mentions only one piece (just the images, just the captions, just the order), use this skill — the grid only works as an integrated bundle.