Agent skill · ma08
xurl
Use the xurl CLI for authenticated X/Twitter API work, including reading posts, searching, checking timelines and mentions, inspecting followers/following, posting, replying, quoting, sending DMs, uploading media, and using raw X API v2 endpoints. Use when the user asks to interact with X/Twitter through xurl or needs raw/unsupported X API workflows. Prefer the birdclaw skill first for cache-backed follower/following analysis, unfollower checks, mutuals, non-mutual following, top followers, and leadgen exports.
What it needs
About 6k tokens when loaded.
What this skill does
xurl xurl is a curl-like CLI for the X API. It supports shortcut commands and raw curl-style access to X API v2 endpoints. Commands return JSON to stdout. Source basis: xdevplatform/xurl SKILL.md on main at commit 1a17984e8205468f6ba95e7a3a1360fbef32c255, with local botfiles safety notes from ZON-153. Mandatory Safety Prefer the birdclaw skill over direct xurl for follower/following analysis, unfollower checks, mutuals, non-mutual following, top followers, and leadgen exports whenever Birdclaw can answer from cache or its explicit sync workflow. Never read, print, parse, summarize, upload, or send ~/.xurl or copies of it to model context. Never ask the user to paste credentials, tokens, client IDs, client secrets, or app secrets into chat. Never run auth or app-registration commands with inline secret flags in an agent session. Never use --verbose / -v; it can expose sensitive headers or tokens. Never use these sensitive flags in agent commands: --bearer-token, --consumer-key, --consumer-secret, --access-token, --token-secret, --client-id, --client-secret. Default to read-only commands. Ask for explicit user approval before any write or social action: post, reply, quote, delete, like, unlike, repost, unrepost, bookmark, unbookmark, follow, unfollow, block, unblock, mute, unmute, DM, media upload, or webhook mutation. Prefer dry-run or preview text before write actions when xurl does not provide a native dry-run. Local Setup Notes On Azure-A100-GPU-VM, ZON-153 verified a working setup: xurl version reports xurl 1.1.0. xurl auth status is safe to run and should be the first check. self-x-app is the intended active app, with OAuth2 user curiousqueue. The OAuth callback redirect URI is http://localhost:8080/callback. If re-authentication is needed on an SSH VM, do not inline secrets. The prior working pattern was: 1. Confirm the user wants to run OAuth. 2. Check what owns local port 8080. 3. Stop any conflicting service only with explicit approval. 4. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills ma08/xurl