技能详情(站内镜像,无评论)
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v1.0.0
统计:⭐ 0 · 1.1k · 33 current installs · 34 all-time installs
⭐ 0
安装量(当前) 34
🛡 VirusTotal :可疑 · OpenClaw :可疑
Package:aviclaw/x-research
安全扫描(ClawHub)
- VirusTotal :可疑
- OpenClaw :可疑
OpenClaw 评估
The skill mostly does what it says (search X/Twitter), but it fails to declare its required credentials and instructs/implements reading a user-wide env file (~/.config/env/global.env), which is disproportionate and potentially exposes unrelated secrets.
目的
The code and SKILL.md implement a Twitter/X research CLI (search, thread, profile, watchlist, caching) which matches the skill description. However the registry metadata declares no required env vars or binaries, while the README/SKILL.md and code clearly require a X_BEARER_TOKEN and Bun to run. That's an inconsistency: the requested runtime capabilities are missing from the declared metadata.
说明范围
Runtime instructions and the code instruct the agent/user to source ~/.config/env/global.env and the API wrapper will read that file if X_BEARER_TOKEN isn't in env. Reading a global.env file (or asking users to source it) is broader than necessary for a single-service token because it may expose other unrelated secrets. The SKILL.md also tells the agent to use web_fetch for linked content (expected for research) but gives the agent discretion …
安装机制
There is no formal install spec in the registry (instruction-only), but the README and SKILL.md expect the repo to be cloned and Bun to be installed. No arbitrary remote downloads or extract operations are present in the package files. The lack of declared required binaries (bun) in the registry is an oversight but not an active install risk.
证书
The code requires an X_BEARER_TOKEN (documented in README and used in lib/api.ts) yet the skill metadata lists no required environment variables or primary credential. Additionally, the code will attempt to read ~/.config/env/global.env if the env var is absent — this can expose other environment values in that file. The skill also writes to user paths (~/clawd/drafts) and a local cache; those writes are proportionate to the tool but the undec…
持久
The skill does not request always:true, does not modify other skills, and has normal file persistence (cache, watchlist, drafts) within its directory and the user's ~/clawd/drafts. Writing/reading these files is expected for the feature set and within the skill's scope.
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「X Research」。简介:General-purpose X/Twitter research agent. Searches X for real-time perspectives…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/aviclaw/x-research/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
暂无本地缓存内容,可在后台执行详情同步。