Your LinkedIn & Twitter Assistant by Reepl

ReviewAudited by ClawScan on May 10, 2026.

Overview

This is a coherent Reepl social-media management skill, but it can publish or schedule public posts and access Reepl-linked account data, so users should require confirmation for high-impact actions.

Install this only if you want an AI assistant to help manage your Reepl-linked LinkedIn and Twitter/X workflows. Keep the REEPL_MCP_KEY secret, review every post or scheduled action before approval, and be cautious about allowing persistent voice-profile updates or contact/list changes.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used carelessly, the assistant could post, schedule, or modify public content on linked social accounts.

Why it was flagged

The skill exposes tools that can publish or schedule public social-media content, which is high-impact but directly aligned with the advertised social-media assistant purpose.

Skill content
`publish_to_linkedin` | Publish a post to LinkedIn immediately ... `schedule_post` | Queue a post for future publishing ... `twitter_create_post` | Create or schedule a Twitter/X post or thread
Recommendation

Review post text, media, visibility, and timing before approving any publish, schedule, comment, delete, or Twitter/X action.

What this means

Anyone with the key or an authorized connection may be able to act through the linked Reepl account according to its permissions.

Why it was flagged

The skill requires a Reepl OAuth/MCP connection and API key, giving the integration delegated access to the user's Reepl-linked social-media functions.

Skill content
**MCP connection** -- connect your account via OAuth ... `https://mcp.reepl.io/mcp?key=YOUR_API_KEY`
Recommendation

Keep the REEPL_MCP_KEY private, store it only in the intended environment variable, and revoke or rotate it if it is exposed or no longer needed.

What this means

Incorrect or unwanted updates to the voice profile could affect future posts and preserve writing-style information in Reepl.

Why it was flagged

The skill can read and update a persistent writing-style profile, which is expected for maintaining a user's voice but can influence future generated content.

Skill content
`get_voice_profile` | Read your voice profile (writing style patterns) ... `update_voice_profile` | Update voice profile with learned patterns
Recommendation

Only allow voice-profile updates when you intentionally want Reepl to learn from the selected material, and periodically review or reset the profile if needed.

What this means

Drafts, scheduling requests, profile operations, and related account data may be sent to Reepl's MCP service.

Why it was flagged

The skill operates through an external MCP endpoint, so social-media content and account actions are mediated by Reepl rather than local code included in the artifact.

Skill content
# 4. Configure the MCP server endpoint
https://mcp.reepl.io/mcp?key=YOUR_API_KEY
Recommendation

Use this only if you trust Reepl with the relevant social-media workflow and review Reepl's account permissions and privacy settings.