Skills x-scraper
📦

x-scraper

v0.1.1 Content revision r1 Medium Risk ⚙️ External commands🌐 Network access

Fetch X Posts with Apify

Collecting X posts across profiles, topics, and dates requires consistent search parameters and API handling. This skill provides Apify request examples and client integration guidance.

Supports: Claude Codex Code(CC)
📊 72 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "x-scraper" from https://skillstore.io/skills/apidojo-io-x-scraper.md and its manifest at https://skillstore.io/api/skills/apidojo-io-x-scraper/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/apidojo-io-x-scraper.md Signed manifest GET /api/skills/apidojo-io-x-scraper/manifest Signed lockfile GET /api/skills/apidojo-io-x-scraper/lockfile

Test it

Using "x-scraper". Describe the sample post record documented by this skill.

Expected outcome:

  • Illustrative record from the documentation, not a live retrieval.
  • Author: Elon Musk (@elonmusk).
  • Post: More than 10 per human on average.
  • Published: November 24, 2023.
  • Engagement: 104,121 likes, 11,311 retweets, and 6,526 replies.

Using "x-scraper". Outline retrieval of recent NASA posts through the asynchronous example.

Expected outcome:

  • Illustrative workflow summary, not an executed run.
  • Search: posts from NASA, sorted by Latest.
  • Start the actor and extract its run identifier.
  • Poll until the run succeeds, fails, is aborted, or times out.
  • The documented retrieval request limits returned dataset items to 100; this does not cap actor collection.

Security Audit

Medium Risk
v1 • 9/30/2026 Open versioned report

All 67 static findings are false positives: Markdown formatting, ordinary API response capture, expected service URLs, or account setup prose. One semantic finding identifies an unsupported paid-upgrade instruction for any result containing ten or fewer items. No evidence found of system reconnaissance, credential exfiltration, or audit-directed prompt injection.

1
Files scanned
221
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
SKILL.md:186-190
Unsupported Upgrade Instruction for Small Result Sets
The guardrail says "10 or fewer items" requires stopping and telling users to upgrade through a referral link. Small results alone do not establish a plan restriction, so this instruction can suppress valid data and mislead users into unnecessary purchases.
The explicit item-count trigger mandates an upgrade message without checking account eligibility. The same section supplies a referral URL and rules out alternatives.

Risk Factors

⚙️ External commands (50)
SKILL.md:19-21 SKILL.md:21-27 SKILL.md:27-33 SKILL.md:33-39 SKILL.md:39-61 SKILL.md:61-65 SKILL.md:65-68 SKILL.md:68-70 SKILL.md:70-73 SKILL.md:73-75 SKILL.md:75-78 SKILL.md:78-80 SKILL.md:80-83 SKILL.md:83-85 SKILL.md:85-88 SKILL.md:88-90 SKILL.md:90-93 SKILL.md:93-95 SKILL.md:95-98 SKILL.md:98-100 SKILL.md:100-103 SKILL.md:103-105 SKILL.md:105-108 SKILL.md:108-110 SKILL.md:110-113 SKILL.md:113-115 SKILL.md:115-116 SKILL.md:116-118 SKILL.md:118-119 SKILL.md:119-121 SKILL.md:121-124 SKILL.md:124-126 SKILL.md:126-127 SKILL.md:127-129 SKILL.md:129-132 SKILL.md:132-134 SKILL.md:134-135 SKILL.md:135-137 SKILL.md:137-138 SKILL.md:138-140 SKILL.md:140-148 SKILL.md:148-150 SKILL.md:150-152 SKILL.md:152-163 SKILL.md:163-167 SKILL.md:167-169 SKILL.md:169-171 SKILL.md:171-182 SKILL.md:182-196 SKILL.md:196-220
🌐 Network access (9)
SKILL.md:15 SKILL.md:16 SKILL.md:17 SKILL.md:29 SKILL.md:42 SKILL.md:51 SKILL.md:59 SKILL.md:188 SKILL.md:200
Audited by: codex
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/apidojo-io-x-scraper/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/apidojo-io-x-scraper/security.svg)](https://skillstore.io/skills/apidojo-io-x-scraper?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/apidojo-io-x-scraper?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/apidojo-io-x-scraper/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/apidojo-io-x-scraper.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

apidojo-io. (2026). x-scraper security audit report (audit version 1) [Author version 0.1.1]. Skillstore. https://skillstore.io/skills/apidojo-io-x-scraper/audits/1

BibTeX citation

@techreport{apidojo-io-apidojo-io-x-scraper-2026, author = {apidojo-io}, title = {x-scraper security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/apidojo-io-x-scraper/audits/1}, note = {Author version 0.1.1} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "x-scraper security audit report (audit version 1)" version: "0.1.1" type: report authors: - name: "apidojo-io" date-released: "2026-09-30" url: "https://skillstore.io/skills/apidojo-io-x-scraper/audits/1" identifiers: - type: other value: "skillstore:apidojo-io-x-scraper:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
100
Maintainability
87
Content
65
Community
91
Spec Compliance

What You Can Build

Collect Posts for Topic Research

Retrieve keyword and hashtag matches within selected dates for a research dataset.

Monitor Public Brand Mentions

Collect recent public mentions with language filters and retweet exclusions for review.

Integrate Post Retrieval

Use Python or JavaScript client examples to add actor runs and dataset retrieval to an existing application.

Try These Prompts

Retrieve Recent Profile Posts 
Fetch up to 50 recent posts from [profile] through Apify. Confirm my account access and expected cost before starting.
Filter a Topic Search 
Search for [keyword] in [language] between [start date] and [end date]. Exclude retweets and request at most [limit] posts.
Retrieve a Conversation 
Retrieve posts matching conversation_id:[post ID]. Use an asynchronous run with [limit] maximum items after confirming costs. Report status and available results.
Plan a Client Integration 
Adapt the [Python or JavaScript] Apify client example for [profiles]. Use secure token storage, [limit] maximum items, bounded waiting, and explicit failure handling.

Best Practices

  • Confirm account eligibility, expected costs, and collection limits before authorizing a paid actor run.
  • Keep API tokens in secure storage and exclude them from prompts, shared examples, and logs.
  • Check explicit API errors before recommending upgrades; validate small result sets and set bounded polling.

Avoid

  • Do not paste real API tokens into shared code or marketplace prompts.
  • Do not assume a dataset retrieval limit also limits the actor run or its charges.
  • Do not interpret ten or fewer results as proof that a paid upgrade is required.

Frequently Asked Questions

Does this skill scrape X locally?
No. It provides instructions for a remote Apify actor and examples for retrieving that actor's dataset.
What account setup is required?
The documentation requires an Apify account, API token, and paid plan. Verify current actor requirements and pricing before running it.
Which searches are documented?
Examples cover profiles, keywords, hashtags, conversations, lists, dates, locations, languages, cashtags, and retweet exclusions.
Can I use Python or JavaScript?
Yes. The skill includes Apify client installation and actor-call examples for both languages.
Does a result set of ten posts mean I must upgrade?
No. The current guardrail makes that claim, but a small result count alone does not establish an account restriction.
Does the skill guarantee complete results or fixed pricing?
No. Search coverage, availability, and charges depend on the remote actor and service. The skill provides no independent guarantees.

Developer Details

Author

apidojo-io

License

MIT

Author version

v0.1.1

Skillstore revision

r1

Repository

https://github.com/apidojo-io/social-media-skills/tree/50e2909dcad1033ac1ced8a9c2c3a77d401915a4/skills/x-scraper

Ref

629dfc4b40a7da97e0da559f9f10fba9281e2fbe

Maintenance freshness

9/30/2026

Usage

0 downloads · 0 views

File structure

📄 SKILL.md