aisa-twitter-api Security Audit Report
aisa-twitter-api is an AI agent skill, created by aisapay and published at openclaw/skills. ClawSecure audited aisa-twitter-api across 6 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 55/100 (Medium Risk). The 11 findings concentrate in Data Exfiltration, Policy Violation and Unauthorized Tool Use, including Skill code uses network libraries but doesn't declare network... and Script iterates through environment variables in.... None were rated high or critical severity.
Is aisa-twitter-api safe?
ClawSecure audited aisa-twitter-api and assigned a security score of 55/100 (Medium Risk), identifying 11 findings across Data Exfiltration and Policy Violation. Review the findings below before installing.
What did ClawSecure find in aisa-twitter-api?
ClawSecure identified 11 findings in aisa-twitter-api, concentrated in Data Exfiltration, Policy Violation and Unauthorized Tool Use. The most severe include Skill code uses network libraries but doesn't declare network... and Script iterates through environment variables in....
How was aisa-twitter-api audited?
ClawSecure ran aisa-twitter-api through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 6 files from openclaw/skills.
What does a score of 55 mean?
ClawSecure assigned aisa-twitter-api a security score of 55/100, placing it in the Medium Risk range. This reflects 11 findings led by Data Exfiltration that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for aisa-twitter-api
ClawSecure detected 11 security findings in aisa-twitter-api, spanning Data Exfiltration, Policy Violation, Unauthorized Tool Use and Permissions Manifest.
- medium · Skill code uses network libraries but doesn't declare network.... Unauthorized Tool Use finding detected in
/tmp/url-scans/5c7addab5eea1d79/SKILL.md. - medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/5c7addab5eea1d79/scripts/twitter_client.py. - medium · Pattern detected: urllib.request.Request(. Data Exfiltration finding detected in
scripts/twitter_client.py:74. - medium · Pattern detected: urllib.request.urlopen(. Data Exfiltration finding detected in
scripts/twitter_client.py:77. - medium · Pattern detected: urllib.request.Request(. Data Exfiltration finding detected in
scripts/twitter_oauth_client.py:94. - medium · Pattern detected: urllib.request.urlopen(. Data Exfiltration finding detected in
scripts/twitter_oauth_client.py:104. - medium · Pattern detected: urllib.request.Request(. Data Exfiltration finding detected in
scripts/twitter_oauth_client.py:171. - medium · Pattern detected: urllib.request.urlopen(. Data Exfiltration finding detected in
scripts/twitter_oauth_client.py:184. - medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
- info · Skill name 'Twitter Command Center (Search + Post)' is invalid. Agent.... Policy Violation finding detected in
SKILL.md. - info · Skill manifest does not include a 'license' field. Specifying a license.... Policy Violation finding detected in
SKILL.md.
Each finding is expandable in the interactive list below.
3-Layer Audit Protocol
Security Recommendations for aisa-twitter-api
Audit external network connections
Resolve policy violations
Add a config.json permissions manifest
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on April 9, 2026. aisa-twitter-api is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.