AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

X

skill-alanalvestech-hitank-x · by alanalvestech

Post and manage tweets on X (formerly Twitter) via API v2

No reviews yet
0 installs
36 views
0.0% view→install

Install

$ agentstack add skill-alanalvestech-hitank-x

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-alanalvestech-hitank-x)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
6mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of X? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

/x

Connect to the X (formerly Twitter) API v2 to post tweets, search, view timelines and manage likes. Pure Ruby, zero gems — stdlib only.

Structure

scripts/
├── auth.rb          # OAuth 1.0a signature + twitter_request helper (required by all scripts)
├── check_setup.rb   # Check if credentials exist (outputs OK or SETUP_NEEDED)
├── save_token.rb    # Save and validate API credentials
├── me.rb            # Get authenticated user info
├── tweets.rb        # List recent tweets for a user
├── tweet.rb         # Get tweet details by ID
├── post_tweet.rb    # Post a new tweet (requires confirmation)
├── delete_tweet.rb  # Delete a tweet (requires confirmation)
├── search.rb        # Search recent tweets
├── likes.rb         # List liked tweets
└── like.rb          # Like a tweet (requires confirmation)

Setup (check before using)

ruby ~/.claude/skills/x/scripts/check_setup.rb

If the output is OK, proceed to the Flow section.

If the output is SETUP_NEEDED, guide the user step by step. Present ONE step at a time, wait for the user to confirm before moving to the next.

Step 1 — Ask the user to create a Twitter Developer app:

> You need Twitter API credentials. Go to the Developer Portal and create a project and app: > > https://developer.x.com/en/portal/dashboard > > 1. Create a new Project (or use an existing one) > 2. Create an App inside that project

Step 2 — Ask the user to generate credentials:

> In your app settings, go to "Keys and tokens" and generate all 4 credentials: > > - API Key (also called Consumer Key) > - API Key Secret (also called Consumer Secret) > - Access Token > - Access Token Secret > > Copy all 4 values.

Step 3 — Ask the user to check permissions:

> Make sure your app has Read and Write permissions. You can check this under your app's "User authentication settings" in the Developer Portal.

Step 4 — When the user pastes the credentials, save them:

ruby ~/.claude/skills/x/scripts/save_token.rb 'API_KEY' 'API_SECRET' 'ACCESS_TOKEN' 'ACCESS_TOKEN_SECRET'

If the script outputs an error, the credentials are invalid. Ask the user to double-check and try again.

If setup is not complete, DO NOT proceed to the Flow. Complete all steps first.

Flow

The argument $ARGUMENTS may contain tweet text or a tweet ID.

Step 1: Check account info

ruby ~/.claude/skills/x/scripts/me.rb

Present the account info to the user.

Step 2: Present options

Ask the user what they want to do:

  • Post a tweet
  • List recent tweets
  • Search tweets
  • View a tweet
  • Delete a tweet
  • View liked tweets
  • Like a tweet

If $ARGUMENTS looks like tweet text (not a number), offer to post it. If it looks like a tweet ID (numeric), offer to view it.

Step 3: Actions

Post a tweet (requires user confirmation):

Ask the user to type the tweet text. Show a preview of the tweet and its character count. Ask: "Do you want to post this tweet?" Only execute after a "yes".

ruby ~/.claude/skills/x/scripts/post_tweet.rb 'TWEET_TEXT'

List recent tweets:

ruby ~/.claude/skills/x/scripts/tweets.rb
ruby ~/.claude/skills/x/scripts/tweets.rb --user_id USER_ID

View a tweet:

ruby ~/.claude/skills/x/scripts/tweet.rb TWEET_ID

Search recent tweets:

ruby ~/.claude/skills/x/scripts/search.rb 'SEARCH_QUERY'

Delete a tweet (requires user confirmation):

Show the tweet details first, then ask: "Do you want to delete this tweet?" Only execute after a "yes".

ruby ~/.claude/skills/x/scripts/delete_tweet.rb TWEET_ID

View liked tweets:

ruby ~/.claude/skills/x/scripts/likes.rb
ruby ~/.claude/skills/x/scripts/likes.rb --user_id USER_ID

Like a tweet (requires user confirmation):

Show the tweet details first, then ask: "Do you want to like this tweet?" Only execute after a "yes".

ruby ~/.claude/skills/x/scripts/like.rb TWEET_ID

Notes

  • Pure Ruby, zero gems — stdlib only (json, net/http, uri, fileutils, openssl, base64, securerandom)
  • OAuth 1.0a with HMAC-SHA1 signature — full signature generation implemented in auth.rb
  • Twitter API v2 endpoints — all scripts use the v2 API
  • Free tier allows 1,500 tweets/month (posting) and limited reads
  • Token files stored at ~/.config/x/ (4 files, never commit)
  • Post, delete, and like require explicit user confirmation
  • Base URL: https://api.twitter.com

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.