docs: 新增 X/Twitter 全自动化用例#41
Conversation
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 1c8b9a80ba
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| ```bash | ||
| # 设置 API Key(不要直接写入明文,建议使用环境变量) | ||
| export XQUIK_API_KEY="xq_YOUR_KEY" | ||
| openclaw config set plugins.entries.tweetclaw.config.apiKey "$XQUIK_API_KEY" |
There was a problem hiding this comment.
Avoid persisting API key in plaintext config
openclaw config set plugins.entries.tweetclaw.config.apiKey "$XQUIK_API_KEY" will write the expanded secret value into OpenClaw’s config file, so users who follow this step end up storing their API key at rest in plaintext despite the note about using environment variables. This is a security regression in the setup instructions because leaked config files (dotfile sync, backups, screenshots, shared machines) would expose production credentials.
Useful? React with 👍 / 👎.
Summary
usecases/x-twitter-automation.md— TweetClaw 插件实现 X/Twitter 全操作自动化来源验证
Test plan