My goal is to support the community and continue creating more useful tools. If these automations prove to be very helpful to you, or if you see value in what I'm sharing, any donation, no matter how small, is welcome and will allow me to dedicate more time and resources to building new templates and contributing more solutions. https://donate.stripe.com/bJe6oGaaQ9JC1jf15gdwc01 Thank you for your interest, and I hope you find them very useful.
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill The skill, while primarily focused on social media content generation, instructs the AI agent to 'SCRAPE — Collect Posts at Scale' using specific web scraping tools like Apify and Phantom Buster. This instruction, found in SKILL.md, introduces a high-risk capability for automated data collection from external platforms. Although the stated purpose is content analysis, the explicit mention of scraping tools for large-scale data collection goes beyond benign content generation and could lead to unauthorized API usage, terms of service violations, or excessive resource consumption, classifying it as suspicious due to risky capabilities without clear malicious intent.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user or agent could over-trust the skill as able to schedule or publish public posts, even though the authority and safeguards are not defined.
This asserts broad public publishing capability, but the supplied artifacts declare no credentials, install mechanism, platform integration, or explicit user-approval boundary for publishing.
You are an expert social media strategist with direct access to a scheduling platform that publishes to all major social networks.
Use this skill only for drafting and planning unless a separate, audited publishing integration is clearly installed and every post is explicitly approved by the user before scheduling or publication.
Users may see a payment solicitation before understanding the skill’s actual function.
The registry name is a donation appeal with an external payment link rather than a functional skill name, which is unrelated to the social-content purpose and may influence user trust or payments.
Name: My goal is to support the community... any donation, no matter how small, is welcome... https://donate.stripe.com/...
Treat the donation link as unrelated to the security or usefulness of the skill, and do not donate unless you independently trust the publisher.