Socialconductor Skill

Manage your SocialConductor AI comment automation bots from any chat app. Control Facebook, Instagram, YouTube, and TikTok — check status, pause or resume AI...

Security Scan

The skill's requested credentials, instructions, and behavior are coherent with its stated purpose (managing SocialConductor bots); nothing in the bundle requests unrelated secrets or installs arbitrary code, but you should still review token scopes and the external links before enabling autonomous posting.

Purpose & Capability

The skill claims to manage Facebook/Instagram, YouTube, and TikTok bots and requires API keys named SC_FB_API_KEY, SC_YT_API_KEY, and SC_TIKTOK_API_KEY — these env vars align with the described platforms. Instagram usage appears to be covered via the Facebook/Graph key (common pattern). No unrelated services or credentials are requested.

Instruction Scope

SKILL.md is instruction-only and stays within the service's scope: it describes connecting accounts via browser links, toggling simulation vs live posting, viewing logs, blocking users, and posting manual replies. It does not instruct reading local files or unrelated environment variables. Note: the skill instructs the agent to perform actions that can post to social accounts (including automatic posting), so consider the implications of autonomous actions and ensure you understand the simulation vs live posting behavior.

Install Mechanism

No install spec or code files are present (instruction-only), so nothing will be downloaded or written to disk by an installer — low install risk.

Credentials

Requested env vars map to the platforms the skill controls and the primaryEnv is the Facebook key, which is reasonable given the Facebook/Instagram dual support. There are no extra unrelated secrets. Recommendation: provide API keys scoped minimally (e.g., limited posting scopes or test accounts) rather than full admin credentials.

Persistence & Privilege

The skill is not 'always' enabled and does not request special system-wide config changes. However, it allows autonomous model invocation (the platform default) and the skill can issue posting and blocking commands via the supplied API keys — this is expected for an automation skill but increases impact if keys are misused. Consider whether you want autonomous agent actions for posting enabled.

Assessment

This skill is internally consistent with its purpose, but review these practical steps before installing: - Verify the domains/links in SKILL.md (podium.socialconductor.ai, studio.socialconductor.ai, violin.socialconductor.ai) are legitimate for your organisation before clicking any auth links. - Only provide API keys scoped to the minimum permissions needed (e.g., read-only for monitoring, limited posting scope or test accounts for trialing auto-replies). - Prefer creating a dedicated bot/service account or test page/channel rather than using a primary admin account. - Start in simulation mode (no live posts) to confirm behavior; verify the 'simulation mode' actually prevents outbound posts. - Confirm how the OAuth/browser flow is implemented (does the link include tokens in query strings?) and that the redirect and webhook base URL match the service's docs. - If you enable autonomous agent invocation, accept that the skill can perform actions (post replies, block users) without additional prompts — disable autonomous invocation if you prefer manual confirmations. - Rotate keys and revoke them if you remove the skill or suspect misuse. Note: the bundle contains only an instruction file and no code for static scanning; absence of scan findings only means there was nothing to scan — you should still validate the external service and credentials before use.

SocialConductor — Facebook, Instagram, YouTube & TikTok

Control your SocialConductor AI comment bots from WhatsApp, Slack, Telegram, or iMessage.

Platforms

Platform	Status	Dashboard
👥 Facebook / Instagram	✅ Live	podium.socialconductor.ai
📺 YouTube	✅ Live	studio.socialconductor.ai
🎵 TikTok	✅ Live	violin.socialconductor.ai

Each platform uses its own API key. You can connect one, two, or all three — commands are prefixed by platform so OpenClaw always knows which bot you mean.

---

Facebook / Instagram — Account Requirements

⚠️ Facebook requires a Business or Professional Creator account. A personal Facebook profile will not work. Before connecting, make sure you have:

• A Facebook Page (not a personal profile) set up at business.facebook.com
• Your Page linked to a Business Manager or configured as a Professional Creator Page
• Admin or Editor role on the Page

Instagram automation is available if your Instagram account is connected to your Facebook Page as a Professional (Creator or Business) Instagram account. A standard personal Instagram account will not work.

Facebook / Instagram — Setup (first time only)

Say:

connect my facebook page

OpenClaw registers you and sends a browser link. Open it, log in with Facebook (~30 seconds), close the tab. All Facebook and Instagram commands are now active.

Important: Before the bot can post live replies, you must accept the SocialConductor terms of service at https://podium.socialconductor.ai/terms — takes 30 seconds. Until you do, the bot runs in simulation mode (replies are generated but not posted). You will see a terms_required error in chat as a reminder.

Facebook / Instagram Trial

New accounts get a 7-day free trial with up to 30 AI replies per day. After the trial, visit podium.socialconductor.ai/upgrade to subscribe.

Facebook / Instagram — Commands

Say this	What happens
check my facebook bot	Mode, plan, trial status, daily usage, last 3 replies
pause my facebook bot	Hold ON — AI replies stop immediately
resume my facebook bot	Hold OFF — AI replies resume
show recent facebook comments	Last 5 log entries
show posted facebook comments	Only successfully posted replies
show facebook skipped comments	Comments the bot filtered (gate skips)
show my facebook leads	Lead-flagged comments (price, buy, how much…)
reply to facebook comment abc123 saying Great question!	Posts manual reply
block @username	Adds @username to block list
unblock @username	Removes @username from block list
show blocked facebook users	Lists all blocked accounts
facebook simulation mode on	Replies generated but not posted
facebook simulation mode off	Bot posts for real
enable facebook bot	Turns on auto-reply
disable facebook bot	Turns off auto-reply
turn on viral intelligence	Enables Reaction-Weighted Intelligence
connect my facebook page	Get a one-time browser link

Facebook / Instagram — Webhook Base URL

https://podium.socialconductor.ai/api/openclaw/

---

YouTube — Account Requirements

⚠️ YouTube requires an active YouTube channel (YouTube Page). A Google account alone is not enough — you must have created a YouTube channel at youtube.com before connecting. The channel can be a standard creator channel; no special business setup is required.

YouTube — Setup (first time only)

Say:

connect my youtube channel

OpenClaw registers you and sends a browser link. Open it, sign in with Google (30 seconds), close the tab. All YouTube commands are now active.

YouTube — Commands

Say this	What happens
check my youtube bot	Mode, plan, daily usage, last 3 replies
pause my youtube bot	Hold ON — replies stop
resume my youtube bot	Hold OFF — replies resume
show recent youtube comments	Last 5 log entries
show posted youtube comments	Only successfully posted replies
show youtube skipped comments	Comments the bot filtered
show youtube leads	Lead-flagged comments
reply to youtube comment abc123 saying Great question!	Posts manual reply
show my youtube videos	Video polling status
show stale youtube videos	Videos with no recent activity
reactivate youtube video abc123	Resumes polling that video
youtube simulation mode on	Replies generated but not posted
youtube simulation mode off	Bot posts for real
enable youtube bot	Turns on auto-reply
disable youtube bot	Turns off auto-reply
fast youtube response mode	Sets delay to fast
aggressive youtube response mode	Sets delay to aggressive
conservative youtube response mode	Sets delay to conservative

YouTube — Webhook Base URL

https://studio.socialconductor.ai/api/openclaw/

---

TikTok — Account Requirements

✅ TikTok works with standard creator accounts. No business account or special setup is required — any normal TikTok creator account can connect. Just make sure your account is active and can post/comment.

TikTok — Setup (first time only)

Say:

connect my tiktok account

OpenClaw registers you and sends a browser link. Open it on your phone or computer, scan the TikTok QR code, close the tab. All TikTok commands are now active.

QR note: TikTok login requires a QR code scanned in a real browser. OpenClaw sends you a link — it cannot embed the QR in chat. The link expires in 15 minutes.

TikTok Trial

New accounts get a 7-day free trial with up to 30 AI replies per day. After the trial, visit violin.socialconductor.ai/upgrade to subscribe. Expired trial channels are automatically removed from polling.

TikTok — Commands

Say this	What happens
check my tiktok bot	Mode, plan, trial status, daily usage, last 3 replies
pause my tiktok bot	Hold ON — replies stop
resume my tiktok bot	Hold OFF — replies resume
show recent tiktok comments	Last 5 log entries
show posted tiktok comments	Only successfully posted replies
show tiktok skipped comments	Comments the bot filtered
show tiktok leads	Lead-flagged comments
reply to tiktok comment abc123 saying Great video!	Posts manual reply via Playwright
block @username	Adds @username to block list
unblock @username	Removes @username from block list
show blocked tiktok users	Lists all blocked accounts
show my tiktok videos	Video polling status
show stale tiktok videos	Videos with no recent activity
reactivate tiktok video abc123	Resumes polling that video
connect my tiktok account	Get a QR code browser link
tiktok simulation mode on	Replies generated but not posted
tiktok simulation mode off	Bot posts for real
enable tiktok bot	Turns on auto-reply
disable tiktok bot	Turns off auto-reply
fast tiktok response mode	Sets delay to fast
aggressive tiktok response mode	Sets delay to aggressive
conservative tiktok response mode	Sets delay to conservative

TikTok — Webhook Base URL

https://violin.socialconductor.ai/api/openclaw/

---

Auth

Each platform issues its own Bearer token via POST /api/openclaw/register with {"openclaw_user_id": "..."}. Tokens are stored locally by OpenClaw and sent as Authorization: Bearer <key> on every call. Keys are SHA-256 hashed before server-side storage — the plaintext is never saved remotely.

Platform	Register endpoint
Facebook / Instagram	https://podium.socialconductor.ai/api/openclaw/register
YouTube	https://studio.socialconductor.ai/api/openclaw/register
TikTok	https://violin.socialconductor.ai/api/openclaw/register

---

Error reference

Error code	Meaning
unauthorized	API key missing or invalid
trial_expired	7-day trial ended — upgrade at the platform's /upgrade page
no_page	Platform not linked yet — say "connect my facebook/tiktok/youtube account"
terms_required	Terms of service not accepted — visit podium.socialconductor.ai/terms
rate_limited	Platform rate-limited this channel — bot resumes automatically
reply_failed	Reply attempt failed — check dashboard for details

---

Support

• Email: [e-mail]
• Facebook Dashboard: https://podium.socialconductor.ai
• YouTube Dashboard: https://studio.socialconductor.ai
• TikTok Dashboard: https://violin.socialconductor.ai