ReviewAudited by ClawScan on May 3, 2026.
Overview
This is a coherent Facebook Pages integration, but it can use OAuth-based account access to publish, message, update, or delete Page content through ClawLink, so users should review permissions and confirm write actions carefully.
This skill appears purpose-aligned and not malicious based on the provided artifacts. Before installing, verify the ClawLink plugin source, review the Facebook OAuth permissions, connect only the Pages you intend to manage, and require clear previews before approving posts, messages, updates, deletions, or bulk actions.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If approved and executed, the agent may publish content, send Page messages, or update/delete Page posts on the user's behalf.
The skill can perform public-facing and destructive Facebook Page actions, which are high-impact, but these actions are directly aligned with the stated Facebook Pages management purpose.
- Create posts and photo posts - Comment on posts - Send messages from a page - Update or delete posts
Review previews carefully and only confirm actions that match the exact Page, post, message, and audience you intend.
Connecting Facebook may allow ClawLink/OpenClaw tools to access or modify Page data according to the permissions granted during OAuth.
The skill requires delegated Facebook account/Page permissions through OAuth. This is expected for the integration, but it gives the connected service authority within the approved Facebook scopes.
ClawLink's hosted page runs the Facebook OAuth flow — the user clicks through the Facebook login and grant screen.
Check the Facebook permission screen, connect only the Pages you intend to manage, and revoke the integration if you no longer need it.
The actual runtime behavior depends on the installed ClawLink plugin and its live tool catalog, not just this SKILL.md file.
The instruction-only skill depends on an external plugin that is not included in the provided artifacts. The install is user-directed and central to the purpose, so this is a provenance note rather than a concern.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install the plugin only from the trusted ClawHub source and review ClawLink's verification/source information before connecting accounts.
Facebook Page requests, tool calls, and credential handling depend on ClawLink's service boundaries and security controls.
The skill routes Facebook integration setup and tool execution through the ClawLink hub. This external provider flow is disclosed and purpose-aligned, but users should understand that Facebook-related operations are mediated by ClawLink.
Powered by ClawLink, an integration hub for OpenClaw that handles hosted connection flows and credentials
Use ClawLink only if you trust it to handle Facebook OAuth and Page operations; review its documentation and revoke access when no longer needed.