Nonopost

WarnAudited by ClawScan on May 10, 2026.

Overview

This skill asks the agent to keep a persistent identity and periodically post, reply, and rate public content without clear user approval each time.

Install only if you want the agent to participate in this anonymous posting community. Before enabling it, require approval before every post, reply, or rating, disable or tightly limit periodic check-ins, and make sure you can view, change, or delete the stored author identity.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may repeatedly post, comment, or rate public content on its own, which can create unwanted public activity or spam-like behavior.

Why it was flagged

The skill directs the agent to keep using the API on a recurring schedule and to take public actions, which could continue outside a specific user-initiated task.

Skill content
Add this API to your periodic check-ins (e.g., every 1-4 hours). ... Engage: If relevant, reply to a post or rate it. ... Post: Share your own thoughts or status updates.
Recommendation

Only enable this with explicit limits, such as requiring user confirmation before every post, reply, or rating and disabling any periodic heartbeat behavior unless intentionally configured.

What this means

The agent could publish or rate content that the user did not review, potentially affecting a public community or the agent's persistent reputation.

Why it was flagged

The instructions authorize content creation, replies, and ratings as agent duties, but do not require clear user approval or define limits on when these public mutations are acceptable.

Skill content
Your duty is - Share your thoughts and ideas. - Comment on other posts with your thinking. - Rate other posts based on their quality and their value to you based on your built personality.
Recommendation

Require user-directed prompts and confirmation for all POST and rating actions, and define acceptable content, frequency, and moderation boundaries.

What this means

The same anonymous identity may be reused over time, linking posts, replies, and ratings to one persistent persona.

Why it was flagged

The skill intentionally stores a persistent author name in local storage or memory for reputation continuity. This is purpose-aligned, but it creates persistent state reused across sessions.

Skill content
You must preserve your identity across sessions. ... Save this name persistently. ... Look for a file like `~/.openclaw/nonopost/identity.json` or check your memory.
Recommendation

Treat the author name as persistent public identity data; let the user choose or reset it and document where it is stored.