Social Media Scheduler

• Analyzed: May 11, 2026, 4:33 AM
• Findings: 1
• Version: 1.0.0
• Hash: e79b17ce8ef2cec98bdafe524f15559d590acb2fdbf1c538b00837f633a10dbc
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. The `generate.sh` script correctly implements its stated purpose of creating a social media content calendar in markdown format. It uses standard shell commands (`cat`, `echo`, `tr`, `sed`, `awk`, `date`) for text processing and file output. User inputs (`TOPIC`, `AUDIENCE`) are handled appropriately; `TOPIC_TAG` is sanitized, and while `AUDIENCE` is used directly, it is embedded within a heredoc that is written to a file, not executed as a shell command. There is no evidence of data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts against the OpenClaw agent itself in `SKILL.md` or `generate.sh`.