Reputation Audit

Scores your own posts against a risk rubric with one LLM call per post, then rolls the verdicts into a 0-100 reputation score, a letter grade, and the specific posts worth a second look. Three surfaces share one scoring engine (src/ai/reputationScorer.js): a browser script that also renders a downloadable, shareable score card image; a CLI command for scripting; and an API route for agents.

This audits your own content for risk, not someone else's account and not follower quality. For follower/network audits, use Community Health Monitoring. For bulk-deleting by age, keyword, or engagement rather than AI-judged risk, use Content Cleanup.

The rubric

Every post is scored 0 (no risk) to 100 (severe) on up to four dimensions in a single model call, plus an optional custom question:

The overall score for a post is the MAX across its dimensions, not the average: one severe dimension and three clean ones is still a post worth flagging. Verdict: flagged at 70+, review at 40-69, clean below 40 (FLAG_THRESHOLD / REVIEW_THRESHOLD in the scorer module).

The account-level reputation score blends the average risk across all scanned posts (60%) with the single worst post (40%), so one severe outlier still pulls the grade down even when everything else is clean.

The report carries dimensionAverages and dimensionPeaks side by side. Read and present the peak, not just the average: one post at 92 among four clean ones averages to 18, and reporting only that contradicts the grade the same report gives.

Browser script (with the shareable score card)

File: scripts/reputationAudit.js — full guide: docs/reputation-audit.md

The only surface that renders the downloadable/copyable PNG score card.

How to use

1. Open the user's own profile: x.com/USERNAME (or /with_replies, the biggest source of risk on most accounts)
2. DevTools (F12) then Console
3. Paste the script. A panel appears bottom-right pre-loaded with all four dimensions on
4. Click Scan. Read the score, download or copy the card, optionally clean up what got flagged (its own dry run, off by default)

What to tell the user

• Scanning only reads and scores. Nothing is touched until Cleanup runs, and that starts in dry run.
• Cleanup reuses the same verified-delete logic as scripts/searchSweep.js and only ever touches the account's own posts.
• The card downloads as a 1200x675 PNG (X's own card ratio) or copies straight to the clipboard to paste into a new post.
• Scored posts are cached locally for 14 days by id + rubric, so re-scanning after a cleanup or the next day does not re-bill already-scored posts.

CLI

File: src/cli/commands/reputation.js

xactions reputation USERNAME
xactions reputation USERNAME --replies --limit 200
xactions reputation USERNAME --dimensions hostile,legal --custom-question "Does this reveal my employer?"
XAI_API_KEY=xai-... xactions reputation USERNAME --provider xai --json

Prints the score, a bar per dimension, and the flagged/review posts with the reason each was flagged. --json for scripting; no card image (terminal-only, point the user to the browser script for that).

SDK / API

Module: src/ai/reputationScorer.js, exported from the package root as scorePost, scorePosts, summarizeReport, scoreToGrade, DIMENSIONS.

import { scorePosts, summarizeReport } from 'xactions';

const scores = await scorePosts(posts, { provider: 'xai', apiKey, dimensions: ['professional', 'legal'] });
const report = summarizeReport(posts, scores);

API: POST /api/ai/reputation/score (x402-priced, reputation:score, $0.01/call) takes { posts, dimensions?, customQuestion?, provider?, model?, apiKey? } and returns { report, scores }. GET /api/ai/reputation/dimensions lists the rubric with no payment required. Both are documented in /openapi.json under the Reputation tag for agent discovery.

Any LLM provider

xAI (Grok) works straight from the browser console: x.com's Content-Security-Policy allows api.x.ai. OpenAI, Anthropic, OpenRouter, and Ollama need the browser extension bridge (extension/), or use the CLI/SDK, which has no CSP to work around.

Related Skills

• content-cleanup — bulk-delete by age/keyword/engagement instead of AI-judged risk
• community-health-monitoring — audits your followers and network, not your own posts
• analytics-insights — general engagement and performance analytics