social-content

PassAudited by ClawScan on May 1, 2026.

Overview

This is an instruction-only social media strategy skill with no code or declared credentials, but users should keep account actions, scraping workflows, and local marketing context use under review.

This skill appears safe for drafting and planning social media content. Before installing, be aware that it may use local marketing context if present and may suggest scraping, posting, commenting, reposting, or DM workflows; keep those activities user-approved and avoid putting secrets in marketing-context files.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If connected to social media tools, the agent could draft or perform actions that are visible to others or sent from the user's account.

Why it was flagged

The skill describes social-account engagement actions that can affect public content or private messages. The artifacts do not grant social-account tools, so this is a purpose-aligned note rather than a concern.

Skill content
Respond to all comments on your posts ... Comment on 5-10 posts ... Share/repost with added insight ... Send 2-3 DMs to new connections
Recommendation

Keep posting, commenting, reposting, and DM actions in draft mode or require explicit user approval before publication or sending.

What this means

A user could be guided toward collecting third-party social content at scale or using automation services that may require extra care.

Why it was flagged

The reference guide recommends large-scale scraping or automation tools for social-content analysis. This fits the marketing purpose, but it can involve platform-policy, privacy, or account-automation risks.

Skill content
Gather 500-1000+ posts ... Apify — LinkedIn scraper, Twitter scraper actors ... Phantom Buster — Multi-platform automation
Recommendation

Use official exports or permitted APIs where possible, avoid sharing session credentials unnecessarily, and comply with each platform's terms and privacy requirements.

What this means

Private product or marketing details from that file could influence generated social content or be accidentally included in drafts.

Why it was flagged

The skill instructs the agent to reuse a persistent local context file. That is useful for marketing work, but the file may contain sensitive, stale, or untrusted business context.

Skill content
If `.claude/product-marketing-context.md` exists, read it before asking questions. Use that context
Recommendation

Keep secrets out of the context file, review its contents periodically, and treat it as reference material rather than authoritative instructions.