Install
$ agentstack add skill-alberduris-skills-x-twitter ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
X (Twitter) API v2 skill using the authenticated user's own developer credentials (OAuth 1.0a, pay-per-use). All commands go through a single entry point: node /x.js [flags]. Each command has its own doc file with the full reference for flags and behavior.
[!SETUP] Before first use, check whether /node_modules exists. If it does NOT exist, run npm install --prefix . Then check whether /dist/x.js exists. If it does NOT exist, run npm run build --prefix . NEVER cd into the skill directory; use --prefix to target it without changing your working directory.
[!COMMANDS]
Core: a) me — authenticated user's own account data (profile, metrics, verification). @docs/me.md. b) search — search posts by query. IMPORTANT: by default searches only the last 7 days; use --all (requires XAPIBEARER_TOKEN) for full archive. Do NOT use search with conversation_id: to read threads — use thread instead. @docs/search.md. c) get — retrieve one or more posts by ID. @docs/get.md. d) post — create a tweet, reply, or quote tweet. @docs/post.md. e) delete — delete a post owned by the authenticated user. @docs/delete.md. f) thread — retrieve a full thread/conversation given any tweet ID. Auto-resolves the conversation, paginates, and returns all tweets sorted chronologically. Use --all for threads older than 7 days. @docs/thread.md.
Engagement: g) like — like a post by tweet ID. @docs/like.md. h) unlike — remove a like from a post. @docs/like.md. i) repost — repost (retweet) a post. @docs/repost.md. j) unrepost — remove a repost. @docs/repost.md.
Social: k) user — look up user(s) by username or ID. @docs/user.md. l) follow — follow a user by username or ID. @docs/follow.md. m) unfollow — unfollow a user. @docs/follow.md. n) followers — list a user's followers. @docs/followers.md. o) following — list accounts a user follows. @docs/followers.md.
Feed: p) timeline — your home timeline (reverse chronological, not the algorithmic "For you" feed). Note (2026-02-14): the X API returns heavily skewed results — mostly own tweets — and does not faithfully reproduce the "Following" tab on x.com. Use --exclude replies,retweets to improve signal. @docs/timeline.md. q) mentions — posts that mention you. @docs/mentions.md.
Bookmarks: r) bookmark — bookmark a post. @docs/bookmark.md. s) unbookmark — remove a bookmark. @docs/bookmark.md. t) bookmarks — list your bookmarks. @docs/bookmark.md.
Moderation: u) mute — mute a user. @docs/mute.md. v) unmute — unmute a user. @docs/mute.md. w) muted — list muted accounts. @docs/mute.md. x) blocked — list blocked accounts. @docs/blocked.md. y) hide-reply — hide a reply to your post. @docs/hide-reply.md.
Analytics: z) likers — users who liked a post. @docs/likers.md. aa) reposters — users who reposted a post. @docs/reposters.md. ab) quotes — quote tweets of a post. @docs/quotes.md. ac) count — count posts matching a query over time. @docs/count.md. ad) reposts-of-me — reposts of your posts by others. @docs/reposts-of-me.md.
Discovery: ae) search-users — search users by query. @docs/search-users.md. af) trending — trending topics (worldwide or personalized). @docs/trending.md.
Communities: ag) search-communities — search communities by keyword (name, description). Returns metadata: name, description, member count, join policy. @docs/search-communities.md. ah) community — look up a community by ID. @docs/community.md.
News: ai) search-news — search trending news stories by query. Returns headlines, summaries, categories, keywords, and related posts. @docs/search-news.md. aj) news — look up a news story by ID. @docs/news.md.
[!CREDENTIALS] Four OAuth 1.0a variables are REQUIRED: X_API_KEY, X_API_SECRET, X_ACCESS_TOKEN, X_ACCESS_TOKEN_SECRET. They resolve from the first source that provides them: a) .env.local in cwd, b) .env in cwd, c) .env.local in the plugin directory, d) .env in the plugin directory, e) environment variables. Obtain them from the X Developer Console (Apps > Keys and tokens). One OPTIONAL variable: X_API_BEARER_TOKEN (OAuth 2.0 App-Only Bearer Token). When set, the client auto-selects Bearer auth for read endpoints that require it (e.g. full archive search with --all). Generate it from the X Developer Console (Apps > Keys and tokens > Bearer Token).
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: alberduris
- Source: alberduris/skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.