| name | x_intel |
| description | Read X (Twitter) posts, search, timelines and user profiles via the official xurl CLI. |
| nameZh | X 情报采集 |
| nameEn | X Intel |
| version | 1.0.0 |
| icon | 🐦 |
| author | MateClaw |
| optional | true |
| tags | ["x","twitter","social-media","research","xurl"] |
| platforms | ["linux","macos"] |
| dependencies | {"commands":["xurl"],"tools":["execute_shell_command"]} |
x_intel — X (Twitter) information gathering
x_intel lets an agent pull posts, search results, timelines and user profiles from X (Twitter) through xurl, the X developer platform's official CLI. This skill is read-only by design — it intentionally omits posting, replying, deleting, DM-sending and any other write surface. For a separate publishing skill, see follow-up work.
Use this skill for:
- looking up a single post by ID or URL
- searching posts with the X search query syntax (
from:user, lang:en, #hashtag, ...)
- reading the agent operator's home timeline, mentions, bookmarks, likes
- inspecting a user profile by handle
- walking the social graph (who someone follows / is followed by)
- raw read access to any X API v2 GET endpoint when the shortcuts don't fit
Credential safety (mandatory)
Critical rules when invoked inside an agent session:
- Never read, print, parse, summarize, upload or quote
~/.xurl into chat context. It is a YAML token store.
- Never ask the user to paste credentials/tokens into the conversation.
- Never suggest or run the auth commands with inline secrets in an agent session.
- Never pass
--verbose / -v — it prints auth headers to stdout.
- The only credential-touching command this skill ever runs is
xurl auth status (status only, no secrets).
Forbidden flags in any agent-issued command (each accepts inline secrets):
--bearer-token, --consumer-key, --consumer-secret, --access-token, --token-secret, --client-id, --client-secret.
App registration and the OAuth 2.0 PKCE flow must be performed by the user outside the agent session (see "User setup" below). Tokens persist in ~/.xurl (YAML); OAuth 2.0 refreshes automatically.
Install
The agent should verify, not install. Direct the user to install if missing.
curl -fsSL https://raw.githubusercontent.com/xdevplatform/xurl/main/install.sh | bash
brew install --cask xdevplatform/tap/xurl
go install github.com/xdevplatform/xurl@latest
