Security audit
TweetClaw
Security checks for vulnerabilities and agentic risk
Overview
TweetClaw is a disclosed OpenClaw plugin for X/Twitter reads, paid lookups, monitoring, and approved account actions through Xquik, with proportionate controls for its high-impact capabilities.
Install only if you want OpenClaw to operate an authorized X/Twitter account through Xquik. Review every approval prompt carefully, especially posts, deletes, follows, DMs, profile edits, exports, monitors, webhooks, and paid calls; disable polling if you do not want background event checks.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.