Is gan12003/twitter-api safe?
Yes. gan12003/twitter-api is safe to install. Oathe's behavioral security audit gave the twitter-api skill by gan12003 a trust score of 89/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/gan12003/twitter-api
Is gan12003/twitter-api safe to install?
This is a legitimate Twitter API automation toolkit that provides extensive social media functionality through cookie-based authentication. While the code appears clean with no malicious intent, it contains some poor development practices like hardcoded file paths and provides powerful automation capabilities that could be misused.
What security issues were found in gan12003/twitter-api?
Category Scores
Findings (2)
MEDIUM Hardcoded Windows file paths -15 ▶
The analyze_signal.py script contains hardcoded Windows file paths (C:\Users\IFLW016\Desktop\GanClaw_Workspace_shared\social_ops) which could potentially write files to unexpected locations if the path exists. This indicates poor development practices and lack of proper path generalization.
LOW Powerful automation capabilities -25 ▶
This skill provides extensive Twitter automation functionality including posting tweets, following accounts, fetching notifications, and timeline analysis. While the code appears legitimate, these capabilities could be misused for spam, harassment, or social media manipulation if configured maliciously.
Should I install gan12003/twitter-api?
Oathe's verdict for gan12003/twitter-api is SAFE with a trust score of 89/100. Recommendation: Install with caution.