Social Media Platform

• Risk level: Low Risk
• Analyzed: Feb 24, 2026, 7:18 AM
• Findings: 0
• Version: 1.0.0

Overview

The SKILL.md describes a coherent social-media management platform and its instructions match the stated purpose, but it omits operational/security details (credential handling, LangGraph/RAG sources, dependency/install steps) that you should review before use.

This SKILL.md is internally consistent with a social-media management tool, but it omits important operational and security details. Before installing or implementing: 1) Confirm where third‑party API credentials (Twitter, FB/Instagram, YouTube, TikTok, LangGraph, Supabase) will be kept — avoid storing secrets in plaintext JSONB without encryption and key management. 2) Require OAuth flows for user accounts and follow platform app-review requirements (TikTok requires review for content posting). 3) Define RAG/knowledge-vault sources and add PII protection, consent rules, and retention limits for any user data used in 'research_context'. 4) Add dependency and install instructions (tweepy, google-auth/google-api-python-client, LangGraph SDK, Supabase client, Chart.js) and pin versions; review those packages for supply-chain risk. 5) Implement least-privilege scopes for platform tokens and rotate/revoke tokens on disconnect. 6) Because the skill source is 'unknown' and no install or code files are included, ask the provider for provenance, sample implementation, and security controls; absence of scanner findings here only means there was no code to analyze, not that the design is risk-free.