What problem does it solve? Managing X (Twitter) activity from the command line or an agent session normally requires hand-writing OAuth flows and raw API calls. This Skill wraps the official xurl CLI so an agent can post, search, reply, send DMs, upload media, and call any X API v2 endpoint while keeping credentials out of the conversation. ## Core Features & Use Cases - Full X API coverage: Post, reply, quote, delete, like, repost, bookmark, follow, block, mute, DM, and upload media, plus raw curl-style access to any v2 endpoint. - Secret-safe operation: Enforces strict rules so tokens in ~/.xurl are never read, printed, or sent into LLM context; auth setup is always done by the user outside the agent session. - Multi-app and multi-account support: Switch between registered apps and OAuth2 accounts with --app and --username flags, with auto-refreshing OAuth 2.0 PKCE tokens. - Use Case: Ask the agent to search recent posts about a topic, like the most relevant ones, and reply to one — it verifies auth status first, confirms intent before writes, and returns structured JSON results. ## Quick Start Ask the agent to check xurl auth status and then post "Hello world" to your X account.