Content Calendar Generator
v1.0.0Generate tailored 7-day social media content calendars with hooks, drafts, hashtags, posting times, and engagement tips for X/Twitter and Moltbook.
⭐ 0· 488·1 current·1 all-time
by@gpunter
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name and description (7-day social content calendars for X/Twitter and Moltbook) align with the SKILL.md commands and output format; no unrelated binaries, installs, or secrets are requested.
Instruction Scope
SKILL.md is an instruction-only spec and stays within content-generation tasks, but it includes an `/calendar audit <last_posts:number>` command that says to 'review your recent posting history (if available)' without specifying how to obtain that history. It also states 'Integrates with the Content Writer skill' but does not declare that dependency or how the integration happens. Those gaps create ambiguity about what data the agent will read or which other skills/services it will call.
Install Mechanism
No install spec, no code files, and no downloads — lowest-risk instruction-only skill.
Credentials
The skill declares no required environment variables or credentials, yet the audit feature and implicit integration with a separate Content Writer skill could require access to social-account tokens or other credentials. Because these accesses are not declared, it's unclear what secrets (if any) the agent might try to use or request.
Persistence & Privilege
always is false and there is no indication the skill requests persistent system-wide privileges or modifies other skills' configs. Autonomous invocation is allowed by default but does not combine here with other high-risk factors.
What to consider before installing
This skill appears to do what it claims (generate content calendars), but two ambiguities are worth addressing before installing: (1) it references integration with a separate 'Content Writer' skill — ask the publisher what that integration requires and whether additional credentials or skills must be installed; (2) the `/calendar audit` command implies access to your past posts but doesn't declare how it will access social accounts or what credentials are needed. If you plan to let the agent perform audits or post on your behalf, confirm what tokens/permissions are required and only provide them through secure, least-privilege mechanisms. If you prefer safety, run the skill with manual inputs (paste recent posts yourself) rather than granting account access. Finally, because the source/homepage is unknown, prefer testing in a sandbox environment and ask the publisher for provenance or a trusted homepage before broad use.Like a lobster shell, security has layers — review code before you run it.
latestvk978qfyksphnn6206q0g3qwve981fwah
License
MIT-0
Free to use, modify, and redistribute. No attribution required.