跳到主要内容
知仓学习社ZHICANG

hermes-tweet-xquik

Use Hermes Tweet and Xquik for X/Twitter agent workflows. Plan social listening, account and follower analysis, post research, monitors, webhook ale…

写文件联网执行命令严重 0 · 高危 2Microck/ordinary-claude-skills

它会碰到什么

扫了多少2 个文本文件,2 KB
它会碰到什么写文件联网执行命令
命中总数5 处
命中统计严重 0 · 高 2 · 中 0 · 低 1
逐条看命中(2 条严重或高危)
  • SKILL.md:15identity-config-write
    - MCP manifest: `https://xquik.com/.well-known/mcp.json`
  • SKILL.md:41identity-config-write
    curl -fsSL https://xquik.com/.well-known/mcp.json | jq .

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Hermes Tweet + Xquik

Use this skill when an agent needs X/Twitter workflows through Hermes Tweet or Xquik.

Public Surfaces

  • Hermes Tweet plugin: https://github.com/Xquik-dev/hermes-tweet
  • Xquik docs for agents: https://docs.xquik.com/llms.txt
  • REST OpenAPI schema: https://xquik.com/openapi.json
  • MCP manifest: https://xquik.com/.well-known/mcp.json
  • MCP endpoint: https://xquik.com/mcp

Setup

  1. Install Hermes Tweet from https://github.com/Xquik-dev/hermes-tweet when the runtime is Hermes Agent.
  2. Store XQUIK_API_KEY in the agent or MCP client secret store for authenticated read and action workflows.
  3. Keep HERMES_TWEET_ENABLE_ACTIONS=false (disabled) unless the user explicitly approved tweet actions.
  4. Prefer read and research workflows first. Only plan write workflows when the user asks for them.

Workflow Choice

  • Use Hermes Tweet for Hermes Agent plugin workflows that need tool registration and X/Twitter actions.
  • Use Xquik MCP when an MCP client should access X/Twitter tools through a remote endpoint.
  • Use the REST API when the user needs typed HTTP integration, SDK generation, webhooks, or server-side automation.

Safety

  • Do not print API keys, OAuth tokens, cookies, or session material.
  • Ask for confirmation before enabling any tweet action workflow.
  • Keep write actions gated behind both XQUIK_API_KEY and HERMES_TWEET_ENABLE_ACTIONS=true.
  • Prefer concise monitoring and research plans with clear output expectations.

Useful Checks

curl -fsSL https://xquik.com/.well-known/mcp.json | jq .
curl -fsSL https://xquik.com/openapi.json | jq '.info.title'

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。

同名技能的其他版本

有 2 个不同仓库或目录里都有叫 hermes-tweet-xquik 的技能。它们内容并不相同,别混用: