openclaw-twitter Security Audit Report
openclaw-twitter is an AI agent skill, created by 0xjordansg-yolo and published at openclaw/skills. ClawSecure audited openclaw-twitter across 6 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 55/100 (Medium Risk). The 11 findings concentrate in Data Exfiltration, Policy Violation and Unauthorized Tool Use, including Skill code uses network libraries but doesn't declare network... and Script iterates through environment variables in.... None were rated high or critical severity.
Is openclaw-twitter safe?
ClawSecure audited openclaw-twitter and assigned a security score of 55/100 (Medium Risk), identifying 11 findings across Data Exfiltration and Policy Violation. Review the findings below before installing.
What did ClawSecure find in openclaw-twitter?
ClawSecure identified 11 findings in openclaw-twitter, concentrated in Data Exfiltration, Policy Violation and Unauthorized Tool Use. The most severe include Skill code uses network libraries but doesn't declare network... and Script iterates through environment variables in....
How was openclaw-twitter audited?
ClawSecure ran openclaw-twitter through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 6 files from openclaw/skills.
What does a score of 55 mean?
ClawSecure assigned openclaw-twitter a security score of 55/100, placing it in the Medium Risk range. This reflects 11 findings led by Data Exfiltration that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for openclaw-twitter
ClawSecure detected 11 security findings in openclaw-twitter, spanning Data Exfiltration, Policy Violation, Unauthorized Tool Use and Permissions Manifest.
- medium · Skill code uses network libraries but doesn't declare network.... Unauthorized Tool Use finding detected in
/tmp/url-scans/4da0136c45412a7e/SKILL.md. - medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/4da0136c45412a7e/scripts/twitter_client.py. - medium · Pattern detected: urllib.request.Request(. Data Exfiltration finding detected in
scripts/twitter_client.py:74. - medium · Pattern detected: urllib.request.urlopen(. Data Exfiltration finding detected in
scripts/twitter_client.py:77. - medium · Pattern detected: urllib.request.Request(. Data Exfiltration finding detected in
scripts/twitter_oauth_client.py:94. - medium · Pattern detected: urllib.request.urlopen(. Data Exfiltration finding detected in
scripts/twitter_oauth_client.py:104. - medium · Pattern detected: urllib.request.Request(. Data Exfiltration finding detected in
scripts/twitter_oauth_client.py:171. - medium · Pattern detected: urllib.request.urlopen(. Data Exfiltration finding detected in
scripts/twitter_oauth_client.py:184. - medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
- info · Skill name 'Twitter Command Center (Search + Post)' is invalid. Agent.... Policy Violation finding detected in
SKILL.md. - info · Skill manifest does not include a 'license' field. Specifying a license.... Policy Violation finding detected in
SKILL.md.
Each finding is expandable in the interactive list below.
3-Layer Audit Protocol
Security Recommendations for openclaw-twitter
Audit external network connections
Resolve policy violations
Add a config.json permissions manifest
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on April 3, 2026. openclaw-twitter is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.