Social Media Autopilot

• Analyzed: Apr 9, 2026, 3:06 PM
• Findings: 1
• Version: 1.0.0
• Hash: 4246027dea07fe032946cca1ac52b6dead5133f0bcd0d0da116a0e2093b903f9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate social media content generator that uses the Gemini API to produce a 7-day calendar. The code logic in `autopilot.py` and the instructions in `SKILL.md` are consistent with the stated purpose and include safety instructions for the agent to seek user approval before publishing. The only notable issue is a hardcoded absolute path to a `.env` file (`/Users/edwin/.openclaw/workspace/dreams-arts/.env`), which is a portability flaw and poor security practice but does not indicate malicious intent or provide a mechanism for data exfiltration.