Back to skill
Skillv1.0.0

VirusTotal security

SocialPost Auto · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 9, 2026, 2:26 PM
Hash
20cfe2932f67567ee7c0e3a46cfa477e50ccb65e8628e59ea7dde1955777dddc
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: socialpost-auto Version: 1.0.0 The skill bundle is a social media automation tool designed to schedule and publish content to platforms like Twitter, Weibo, and Xiaohongshu. The core logic in `scripts/post.py` manages a local task queue in a JSON file and provides placeholders for platform API integrations. While the tool requires sensitive credentials (API keys and session cookies) to be stored in the OpenClaw configuration file, there is no evidence of data exfiltration, unauthorized execution, or malicious prompt injection in `SKILL.md` or the Python scripts.
External report
View on VirusTotal