[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M77TYAD0YZ4M5NJNSKYNCMPS":3,"skill-same:01M77TYAD0YZ4M5NJNSKYNCMPS":54},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":19,"linkOnly":20,"markdownContent":21,"markdownBody":22,"frontMatter":23,"refName":26,"commitSha":27,"skillDirectory":28,"forksCount":29,"repositoryHtmlUrl":30,"repositoryHomepageUrl":6,"ownerHtmlUrl":31,"ownerBlogUrl":32,"ownerDescription":6,"updatedAt":33,"install":34,"resources":47},"01M77TYAD0YZ4M5NJNSKYNCMPS","oauth",null,"Implements OAuth 2.0\u002F2.1 authorization flows in Fastify applications — configures authorization code with PKCE, client credentials, device flow, refresh token rotation, JWT validation, and token introspection\u002Frevocation endpoints. Use when setting up authentication, authorization, login flows, access tokens, API security, or securing Fastify routes with OAuth; also applies when troubleshooting token validation errors, mismatched redirect URIs, CSRF issues, scope problems, or RFC 6749\u002F6750\u002F7636\u002F8252\u002F8628 compliance questions.","Reihantt6\u002Fsns-myagent","Reihantt6","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F219822095?v=4","01M77KK94PV8B7C2D9XWXNS8DJ","Mohamad Reihan tegar prasetya","01M77KK958QFMTHYXGXFV7KZ79",2,"MIT","https:\u002F\u002Fgithub.com\u002FReihantt6\u002Fsns-myagent\u002Fblob\u002Fmain\u002Fagent\u002Fskills\u002Foauth\u002FSKILL.md",[],[],"2026-11-15 14:19:17",false,"---\ndescription: \"Implements OAuth 2.0\u002F2.1 authorization flows in Fastify applications — configures authorization code with PKCE, client credentials, device flow, refresh token rotation, JWT validation, and token introspection\u002Frevocation endpoints. Use when setting up authentication, authorization, login flows, access tokens, API security, or securing Fastify routes with OAuth; also applies when troubleshooting token validation errors, mismatched redirect URIs, CSRF issues, scope problems, or RFC 6749\u002F6750\u002F7636\u002F8252\u002F8628 compliance questions.\"\nmetadata: {\"tags\":\"oauth, oauth2, security, authentication, authorization, jwt, fastify\"}\n---\n## When to use\n\nUse this skill when you need to:\n- Implement or debug an OAuth 2.0\u002F2.1 flow in a Fastify application\n- Validate tokens, configure PKCE, or set up refresh token rotation\n- Secure Fastify routes and plugins with access-control middleware\n- Resolve RFC compliance questions or identify security anti-patterns\n\n---\n\n## Step-by-step: Authorization Code + PKCE in Fastify\n\n### 1. Install dependencies\n\n```bash\nnpm install @fastify\u002Foauth2 @fastify\u002Fcookie @fastify\u002Fsession fastify-plugin\n```\n\n### 2. Register the OAuth plugin\n\n```typescript\n\u002F\u002F plugins\u002Foauth.ts\nimport fp from 'fastify-plugin'\nimport oauth2, { OAuth2Namespace } from '@fastify\u002Foauth2'\nimport { FastifyInstance } from 'fastify'\n\nexport default fp(async function (fastify: FastifyInstance) {\n  fastify.register(oauth2, {\n    name: 'oauth2',\n    scope: ['openid', 'profile', 'email'],\n    credentials: {\n      client: {\n        id: process.env.CLIENT_ID!,\n        secret: process.env.CLIENT_SECRET!,\n      },\n      auth: {\n        authorizeHost: process.env.AUTH_SERVER!,\n        authorizePath: '\u002Fauthorize',\n        tokenHost: process.env.AUTH_SERVER!,\n        tokenPath: '\u002Ftoken',\n      },\n    },\n    startRedirectPath: '\u002Flogin',\n    callbackUri: process.env.CALLBACK_URI!,\n    pkce: 'S256',               \u002F\u002F RFC 7636 — always use for public clients\n    generateStateFunction: (req) => req.session.state = crypto.randomUUID(),\n    checkStateFunction: (req, callback) =>\n      req.query.state === req.session.state ? callback() : callback(new Error('State mismatch')),\n  })\n})\n```\n\n**Validation checkpoint:** Confirm `callbackUri` exactly matches a registered redirect URI at the authorization server before proceeding (RFC 6749 §3.1.2).\n\n### 3. Handle the callback and exchange the code\n\n```typescript\n\u002F\u002F routes\u002Fauth.ts\nimport { FastifyInstance } from 'fastify'\n\nexport default async function authRoutes(fastify: FastifyInstance) {\n  fastify.get('\u002Flogin\u002Fcallback', async (request, reply) => {\n    \u002F\u002F @fastify\u002Foauth2 verifies state and exchanges code automatically\n    const tokenResponse = await fastify.oauth2.getAccessTokenFromAuthorizationCodeFlow(request)\n\n    \u002F\u002F Store only what you need; never log the raw token\n    request.session.set('accessToken', tokenResponse.token.access_token)\n    request.session.set('refreshToken', tokenResponse.token.refresh_token)\n\n    return reply.redirect('\u002F')\n  })\n\n  fastify.get('\u002Flogout', async (request, reply) => {\n    await request.session.destroy()\n    return reply.redirect('\u002F')\n  })\n}\n```\n\n### 4. JWT validation middleware (token introspection hook)\n\n```typescript\n\u002F\u002F hooks\u002FverifyToken.ts\nimport { FastifyRequest, FastifyReply } from 'fastify'\nimport jwt from '@fastify\u002Fjwt'\n\nexport async function verifyToken(request: FastifyRequest, reply: FastifyReply) {\n  try {\n    await request.jwtVerify()\n    \u002F\u002F Validate required claims (RFC 7519)\n    const payload = request.user as Record\u003Cstring, unknown>\n    const now = Math.floor(Date.now() \u002F 1000)\n\n    if (typeof payload.exp === 'number' && payload.exp \u003C now)\n      return reply.code(401).send({ error: 'token_expired' })\n\n    if (payload.iss !== process.env.EXPECTED_ISSUER)\n      return reply.code(401).send({ error: 'invalid_issuer' })\n\n    if (payload.aud !== process.env.EXPECTED_AUDIENCE)\n      return reply.code(401).send({ error: 'invalid_audience' })\n\n  } catch (err) {\n    return reply.code(401).send({ error: 'invalid_token', error_description: (err as Error).message })\n  }\n}\n```\n\n**Validation checkpoints:**\n- Verify `exp`, `iss`, `aud`, and `sub` on every request — never skip (RFC 7519 §4)\n- Use `fastify.jwt.verify` (asymmetric RS256\u002FES256) rather than HS256 for tokens issued by a third-party server\n\n### 5. Protecting routes\n\n```typescript\n\u002F\u002F routes\u002Fapi.ts\nimport { FastifyInstance } from 'fastify'\nimport { verifyToken } from '..\u002Fhooks\u002FverifyToken'\n\nexport default async function apiRoutes(fastify: FastifyInstance) {\n  fastify.addHook('onRequest', verifyToken)   \u002F\u002F applies to all routes in this scope\n\n  fastify.get('\u002Fme', {\n    schema: {\n      response: { 200: { type: 'object', properties: { sub: { type: 'string' } } } },\n    },\n  }, async (request) => {\n    const user = request.user as { sub: string }\n    return { sub: user.sub }\n  })\n}\n```\n\n### 6. Refresh token rotation\n\n```typescript\nasync function refreshAccessToken(fastify: FastifyInstance, refreshToken: string) {\n  const newToken = await fastify.oauth2.getNewAccessTokenUsingRefreshTokenFlow({ refresh_token: refreshToken })\n\n  \u002F\u002F Always replace the stored refresh token if rotation is in use (RFC 6749 §10.4)\n  return {\n    accessToken: newToken.token.access_token,\n    refreshToken: newToken.token.refresh_token ?? refreshToken,\n  }\n}\n```\n\n---\n\n## Security checklist\n\n| Requirement | RFC reference |\n|---|---|\n| Validate redirect URI against allowlist | RFC 6749 §3.1.2 |\n| PKCE (S256) for all public clients | RFC 7636 §4.2 |\n| Validate `state` to prevent CSRF | RFC 6749 §10.12 |\n| Validate `iss`, `aud`, `exp` on every JWT | RFC 7519 §4 |\n| Rotate refresh tokens on every use | RFC 6749 §10.4 |\n| Use HTTPS everywhere; reject HTTP redirect URIs | RFC 6749 §3.1.2.1 |\n| Rate-limit token endpoints | OAuth 2.1 §7 |\n\n---\n\n## Common anti-patterns\n\n- **Storing tokens in localStorage** — use `HttpOnly`, `Secure`, `SameSite=Strict` cookies instead\n- **Skipping audience validation** — allows token reuse across services\n- **Using implicit flow** — deprecated in OAuth 2.1; use authorization code + PKCE\n- **Accepting `response_type=token` in browser apps** — tokens in URL fragments leak in logs\u002Freferrers\n- **Symmetric signing (HS256) for third-party tokens** — use RS256\u002FES256 with JWKS endpoint\n\n---\n\n## Further implementation references\n\n- See `DEVICE_FLOW.md` for device authorization flow (RFC 8628) implementation\n- See `TOKEN_VALIDATION.md` for JWKS rotation, caching strategies, and opaque token introspection\n- See `CLIENT_CREDENTIALS.md` for machine-to-machine service authentication patterns\n- See `MOBILE_OAUTH.md` for native\u002Fmobile app flows (RFC 8252) and custom URI schemes\n","## When to use\n\nUse this skill when you need to:\n- Implement or debug an OAuth 2.0\u002F2.1 flow in a Fastify application\n- Validate tokens, configure PKCE, or set up refresh token rotation\n- Secure Fastify routes and plugins with access-control middleware\n- Resolve RFC compliance questions or identify security anti-patterns\n\n---\n\n## Step-by-step: Authorization Code + PKCE in Fastify\n\n### 1. Install dependencies\n\n```bash\nnpm install @fastify\u002Foauth2 @fastify\u002Fcookie @fastify\u002Fsession fastify-plugin\n```\n\n### 2. Register the OAuth plugin\n\n```typescript\n\u002F\u002F plugins\u002Foauth.ts\nimport fp from 'fastify-plugin'\nimport oauth2, { OAuth2Namespace } from '@fastify\u002Foauth2'\nimport { FastifyInstance } from 'fastify'\n\nexport default fp(async function (fastify: FastifyInstance) {\n  fastify.register(oauth2, {\n    name: 'oauth2',\n    scope: ['openid', 'profile', 'email'],\n    credentials: {\n      client: {\n        id: process.env.CLIENT_ID!,\n        secret: process.env.CLIENT_SECRET!,\n      },\n      auth: {\n        authorizeHost: process.env.AUTH_SERVER!,\n        authorizePath: '\u002Fauthorize',\n        tokenHost: process.env.AUTH_SERVER!,\n        tokenPath: '\u002Ftoken',\n      },\n    },\n    startRedirectPath: '\u002Flogin',\n    callbackUri: process.env.CALLBACK_URI!,\n    pkce: 'S256',               \u002F\u002F RFC 7636 — always use for public clients\n    generateStateFunction: (req) => req.session.state = crypto.randomUUID(),\n    checkStateFunction: (req, callback) =>\n      req.query.state === req.session.state ? callback() : callback(new Error('State mismatch')),\n  })\n})\n```\n\n**Validation checkpoint:** Confirm `callbackUri` exactly matches a registered redirect URI at the authorization server before proceeding (RFC 6749 §3.1.2).\n\n### 3. Handle the callback and exchange the code\n\n```typescript\n\u002F\u002F routes\u002Fauth.ts\nimport { FastifyInstance } from 'fastify'\n\nexport default async function authRoutes(fastify: FastifyInstance) {\n  fastify.get('\u002Flogin\u002Fcallback', async (request, reply) => {\n    \u002F\u002F @fastify\u002Foauth2 verifies state and exchanges code automatically\n    const tokenResponse = await fastify.oauth2.getAccessTokenFromAuthorizationCodeFlow(request)\n\n    \u002F\u002F Store only what you need; never log the raw token\n    request.session.set('accessToken', tokenResponse.token.access_token)\n    request.session.set('refreshToken', tokenResponse.token.refresh_token)\n\n    return reply.redirect('\u002F')\n  })\n\n  fastify.get('\u002Flogout', async (request, reply) => {\n    await request.session.destroy()\n    return reply.redirect('\u002F')\n  })\n}\n```\n\n### 4. JWT validation middleware (token introspection hook)\n\n```typescript\n\u002F\u002F hooks\u002FverifyToken.ts\nimport { FastifyRequest, FastifyReply } from 'fastify'\nimport jwt from '@fastify\u002Fjwt'\n\nexport async function verifyToken(request: FastifyRequest, reply: FastifyReply) {\n  try {\n    await request.jwtVerify()\n    \u002F\u002F Validate required claims (RFC 7519)\n    const payload = request.user as Record\u003Cstring, unknown>\n    const now = Math.floor(Date.now() \u002F 1000)\n\n    if (typeof payload.exp === 'number' && payload.exp \u003C now)\n      return reply.code(401).send({ error: 'token_expired' })\n\n    if (payload.iss !== process.env.EXPECTED_ISSUER)\n      return reply.code(401).send({ error: 'invalid_issuer' })\n\n    if (payload.aud !== process.env.EXPECTED_AUDIENCE)\n      return reply.code(401).send({ error: 'invalid_audience' })\n\n  } catch (err) {\n    return reply.code(401).send({ error: 'invalid_token', error_description: (err as Error).message })\n  }\n}\n```\n\n**Validation checkpoints:**\n- Verify `exp`, `iss`, `aud`, and `sub` on every request — never skip (RFC 7519 §4)\n- Use `fastify.jwt.verify` (asymmetric RS256\u002FES256) rather than HS256 for tokens issued by a third-party server\n\n### 5. Protecting routes\n\n```typescript\n\u002F\u002F routes\u002Fapi.ts\nimport { FastifyInstance } from 'fastify'\nimport { verifyToken } from '..\u002Fhooks\u002FverifyToken'\n\nexport default async function apiRoutes(fastify: FastifyInstance) {\n  fastify.addHook('onRequest', verifyToken)   \u002F\u002F applies to all routes in this scope\n\n  fastify.get('\u002Fme', {\n    schema: {\n      response: { 200: { type: 'object', properties: { sub: { type: 'string' } } } },\n    },\n  }, async (request) => {\n    const user = request.user as { sub: string }\n    return { sub: user.sub }\n  })\n}\n```\n\n### 6. Refresh token rotation\n\n```typescript\nasync function refreshAccessToken(fastify: FastifyInstance, refreshToken: string) {\n  const newToken = await fastify.oauth2.getNewAccessTokenUsingRefreshTokenFlow({ refresh_token: refreshToken })\n\n  \u002F\u002F Always replace the stored refresh token if rotation is in use (RFC 6749 §10.4)\n  return {\n    accessToken: newToken.token.access_token,\n    refreshToken: newToken.token.refresh_token ?? refreshToken,\n  }\n}\n```\n\n---\n\n## Security checklist\n\n| Requirement | RFC reference |\n|---|---|\n| Validate redirect URI against allowlist | RFC 6749 §3.1.2 |\n| PKCE (S256) for all public clients | RFC 7636 §4.2 |\n| Validate `state` to prevent CSRF | RFC 6749 §10.12 |\n| Validate `iss`, `aud`, `exp` on every JWT | RFC 7519 §4 |\n| Rotate refresh tokens on every use | RFC 6749 §10.4 |\n| Use HTTPS everywhere; reject HTTP redirect URIs | RFC 6749 §3.1.2.1 |\n| Rate-limit token endpoints | OAuth 2.1 §7 |\n\n---\n\n## Common anti-patterns\n\n- **Storing tokens in localStorage** — use `HttpOnly`, `Secure`, `SameSite=Strict` cookies instead\n- **Skipping audience validation** — allows token reuse across services\n- **Using implicit flow** — deprecated in OAuth 2.1; use authorization code + PKCE\n- **Accepting `response_type=token` in browser apps** — tokens in URL fragments leak in logs\u002Freferrers\n- **Symmetric signing (HS256) for third-party tokens** — use RS256\u002FES256 with JWKS endpoint\n\n---\n\n## Further implementation references\n\n- See `DEVICE_FLOW.md` for device authorization flow (RFC 8628) implementation\n- See `TOKEN_VALIDATION.md` for JWKS rotation, caching strategies, and opaque token introspection\n- See `CLIENT_CREDENTIALS.md` for machine-to-machine service authentication patterns\n- See `MOBILE_OAUTH.md` for native\u002Fmobile app flows (RFC 8252) and custom URI schemes\n",{"metadata":24,"description":7},{"tags":25},"oauth, oauth2, security, authentication, authorization, jwt, fastify","main","58843b159d7a4050d6b785a98b908cce505c0b92","agent\u002Fskills\u002Foauth",0,"https:\u002F\u002Fgithub.com\u002FReihantt6\u002Fsns-myagent","https:\u002F\u002Fgithub.com\u002FReihantt6","reihsns.web.id","2026-08-19 20:08:18",{"source":8,"skillName":5,"commands":35,"prompt":45,"zipAvailable":46},[36,39,42],{"tool":37,"command":38},"npx","npx skills add Reihantt6\u002Fsns-myagent --skill oauth",{"tool":40,"command":41},"bunx","bunx skills add Reihantt6\u002Fsns-myagent --skill oauth",{"tool":43,"command":44},"pnpm","pnpm dlx skills add Reihantt6\u002Fsns-myagent --skill oauth","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FReihantt6\u002Fsns-myagent\u002Fblob\u002Fmain\u002Fagent\u002Fskills\u002Foauth\u002FSKILL.md",true,[48],{"path":49,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":52,"sourceHtmlUrl":53},"tile.json","REFERENCE","参考文档",687,"https:\u002F\u002Fgithub.com\u002FReihantt6\u002Fsns-myagent\u002Fblob\u002Fmain\u002Fagent\u002Fskills\u002Foauth\u002Ftile.json",[55,62,69,76,83,90],{"skillNo":56,"name":57,"nameZh":6,"description":58,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":59,"categories":60,"keywords":61,"publishedAt":19},"01M77XDCYZ407XYMF2T4P6F7VT","youtube-transcript","Extract transcripts from YouTube videos. Use when the user asks for a transcript, subtitles, or captions of a YouTube video and provides a YouTube URL (youtube.com\u002Fwatch?v=, youtu.be\u002F, or similar). Supports output with or without timestamps.","https:\u002F\u002Fgithub.com\u002FReihantt6\u002Fsns-myagent\u002Fblob\u002Fmain\u002Fagent\u002Fskills\u002Fyoutube-transcript\u002FSKILL.md",[],[],{"skillNo":63,"name":64,"nameZh":6,"description":65,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":66,"categories":67,"keywords":68,"publishedAt":19},"01M77XD7PBC98J6MXGJJ2TJ8DX","youtube-thumbnail-design","YouTube thumbnail design with specific dimensions, contrast rules, and mobile preview optimization. Covers safe zones, text placement, face expression psychology, and A\u002FB testing. Use for: YouTube thumbnails, video cover images, click-through optimization. Triggers: youtube thumbnail, thumbnail design, video thumbnail, click through rate, ctr optimization, youtube cover, video cover image, thumbnail maker, thumbnail tips, youtube design, video preview image","https:\u002F\u002Fgithub.com\u002FReihantt6\u002Fsns-myagent\u002Fblob\u002Fmain\u002Fagent\u002Fskills\u002Fyoutube-thumbnail-design\u002FSKILL.md",[],[],{"skillNo":70,"name":71,"nameZh":6,"description":72,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":73,"categories":74,"keywords":75,"publishedAt":19},"01M77XD2541C8HXJ6RHYZP4NGJ","youtube-short-maker","Make YouTube Shorts that hold attention with Pexo — vertical 9:16, fast-paced, hook in the first 3 seconds. Describe your topic and Pexo writes the script, generates the shots, picks the models, and assembles a finished Short with music and captions. Use for YouTube Shorts: \"youtube short\", \"make a youtube short\", \"shorts video\", \"short-form video\". NOT for long-form or landscape video.","https:\u002F\u002Fgithub.com\u002FReihantt6\u002Fsns-myagent\u002Fblob\u002Fmain\u002Fagent\u002Fskills\u002Fyoutube-short-maker\u002FSKILL.md",[],[],{"skillNo":77,"name":78,"nameZh":6,"description":79,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":80,"categories":81,"keywords":82,"publishedAt":19},"01M77XCXKVSYK7KTZ3PQBVVGFD","xcode-project-setup","Safely modifies Xcode projects (.pbxproj) to add Swift Packages and link files. Use this skill whenever an iOS project needs dependencies installed (e.g. Firebase, Alamofire).","https:\u002F\u002Fgithub.com\u002FReihantt6\u002Fsns-myagent\u002Fblob\u002Fmain\u002Fagent\u002Fskills\u002Fxcode-project-setup\u002FSKILL.md",[],[],{"skillNo":84,"name":85,"nameZh":6,"description":86,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":87,"categories":88,"keywords":89,"publishedAt":19},"01M77XCR1DV8ZQK2NHWKVY4EWX","x402","Set up Browser Use Cloud payments with x402 — pay per request from a crypto wallet (USDC on Base mainnet), no signup or API key. Two setups it works out up front — \"just use it\" (set up a wallet so you or Claude Code can run cloud browser tasks paid from the wallet — Claude writes and runs throwaway scripts, nothing touches your codebase) or \"build it in\" (install the SDK and write the key + code into your project). Walks through wallet setup, funding, .env, and a ~$1 test run. Use when the user asks about x402, pay-per-use, USDC payments, or wants Browser Use Cloud without an API key. For the free-tier signup (reverse-CAPTCHA → API key), use `browser-use cloud signup` or the `cloud` skill instead.","https:\u002F\u002Fgithub.com\u002FReihantt6\u002Fsns-myagent\u002Fblob\u002Fmain\u002Fagent\u002Fskills\u002Fx402\u002FSKILL.md",[],[],{"skillNo":91,"name":92,"nameZh":6,"description":93,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":94,"categories":95,"keywords":96,"publishedAt":19},"01M77XCMD3R3ZBZQQSW6E0793B","x-twitter-scraper","Build GitHub Copilot workflows with Xquik X API SDKs, REST endpoints, hosted Apify Actor runs, MCP tools, TweetClaw OpenClaw plugin installs, signed webhooks, tweet search, user lookup, follower exports, media actions, and agent automation.","https:\u002F\u002Fgithub.com\u002FReihantt6\u002Fsns-myagent\u002Fblob\u002Fmain\u002Fagent\u002Fskills\u002Fx-twitter-scraper\u002FSKILL.md",[],[]]