Security audit
Openclaw Twitter Post Engage
Security checks for vulnerabilities and agentic risk
Overview
This skill appears to match its Twitter/X relay purpose, but the registry requirements summary is incomplete even though the manifests and code require an AISA API key.
This looks coherent for a Twitter/X relay skill. Before installing, make sure you are comfortable trusting AISA with the API key, OAuth-mediated posting flow, post content, engagement actions, and any media files you choose to upload. Also verify that your installer actually prompts for AISA_API_KEY and python3 despite the registry summary saying no requirements. Confidence is medium because several large Python files were provided only in truncated form.
Static analysis
No suspicious patterns detected.
