x-api
Facilitates reading and posting to X/Twitter via API, enabling users to manage tweets and mentions efficiently.
Install this skill
or
81/100
Security score
The x-api skill was audited on May 12, 2026 and we found 15 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 75
Curl to non-GitHub URL
SourceSKILL.md
| 75 | curl "https://api.x.com/2/tweets/search/all?query=from%3Athreepointone%20-is%3Areply&start_time=2026-01-01T00%3A00%3A00Z&end_time=2026-05-02T00%3A00%3A00Z&max_results=100&tweet.fields=created_at,publi |
low line 37
Base64 decode operation
SourceSKILL.md
| 37 | cred = base64.b64encode(f'{ck}:{cs}'.encode()).decode() |
low line 40
External URL reference
SourceSKILL.md
| 40 | 'https://api.twitter.com/oauth2/token', |
low line 52
External URL reference
SourceSKILL.md
| 52 | 'https://api.twitter.com/2/tweets/TWEET_ID', |
low line 75
External URL reference
SourceSKILL.md
| 75 | curl "https://api.x.com/2/tweets/search/all?query=from%3Athreepointone%20-is%3Areply&start_time=2026-01-01T00%3A00%3A00Z&end_time=2026-05-02T00%3A00%3A00Z&max_results=100&tweet.fields=created_at,publi |
low line 118
External URL reference
SourceSKILL.md
| 118 | r = client.get("https://api.twitter.com/2/users/me") |
low line 145
External URL reference
SourceSKILL.md
| 145 | r = client.get("https://api.twitter.com/2/users/2022779096049311744/mentions", |
low line 150
External URL reference
SourceSKILL.md
| 150 | r = client.get("https://api.twitter.com/2/users/2022779096049311744/tweets", |
low line 154
External URL reference
SourceSKILL.md
| 154 | r = client.post("https://api.twitter.com/2/tweets", json={"text": "your tweet"}) |
low line 157
External URL reference
SourceSKILL.md
| 157 | r = client.post("https://api.twitter.com/2/tweets", |
low line 161
External URL reference
SourceSKILL.md
| 161 | r = client.get("https://api.twitter.com/2/tweets/search/recent", |
low line 165
External URL reference
SourceSKILL.md
| 165 | r = client.get("https://api.twitter.com/2/users/by/username/USERNAME", |
low line 170
External URL reference
SourceSKILL.md
| 170 | r = client.post(f"https://api.twitter.com/2/users/{my_id}/following", |
low line 174
External URL reference
SourceSKILL.md
| 174 | r = client.delete("https://api.twitter.com/2/tweets/TWEET_ID") |
low line 182
External URL reference
SourceSKILL.md
| 182 | agent-browser open "https://x.com/USERNAME/status/TWEET_ID" |
Scanned on May 12, 2026
View Security Dashboard