What problem does it solve? Interacting with the X (Twitter) API normally requires writing HTTP clients, managing OAuth tokens, and parsing responses by hand. This Skill wraps the official xurl CLI so an agent can post, search, read, and engage on X using simple commands that return structured JSON, while enforcing strict credential-safety rules. ## Core Features & Use Cases - Full X API v2 coverage: Post, reply, quote, delete, search, read timelines and mentions, like, repost, bookmark, follow, block, mute, send DMs, and upload media — plus raw curl-style access to any v2 endpoint. - Multi-app and multi-account auth: OAuth 2.0 PKCE with auto-refreshing tokens, per-app credential isolation, and account switching via --app and --username flags. - Mandatory secret safety: The agent never reads ~/.xurl, never uses --verbose or inline-secret flags, and directs all credential registration and OAuth flows to the user outside the session. - Use Case: Ask the agent to search X for posts about a topic, like the most relevant ones, and reply to one — it verifies auth status first, confirms your intent before any write action, and returns parsed JSON results. ## Quick Start Ask the agent to check xurl auth status and then search X for posts about a topic you care about.