PassAudited by VirusTotal on May 3, 2026.
Overview
Type: OpenClaw Skill Name: facebook-pages Version: 0.1.0 The skill bundle provides instructions for an AI agent to manage Facebook Pages using the ClawLink integration service. It follows standard OAuth and plugin management patterns, including explicit safety guidelines such as requiring user confirmation for destructive actions and protecting credentials from being echoed in chat. No evidence of malicious intent, data exfiltration, or unauthorized execution was found in SKILL.md or _meta.json.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If approved and executed, the agent may publish content, send Page messages, or update/delete Page posts on the user's behalf.
The skill can perform public-facing and destructive Facebook Page actions, which are high-impact, but these actions are directly aligned with the stated Facebook Pages management purpose.
- Create posts and photo posts - Comment on posts - Send messages from a page - Update or delete posts
Review previews carefully and only confirm actions that match the exact Page, post, message, and audience you intend.
Connecting Facebook may allow ClawLink/OpenClaw tools to access or modify Page data according to the permissions granted during OAuth.
The skill requires delegated Facebook account/Page permissions through OAuth. This is expected for the integration, but it gives the connected service authority within the approved Facebook scopes.
ClawLink's hosted page runs the Facebook OAuth flow — the user clicks through the Facebook login and grant screen.
Check the Facebook permission screen, connect only the Pages you intend to manage, and revoke the integration if you no longer need it.
The actual runtime behavior depends on the installed ClawLink plugin and its live tool catalog, not just this SKILL.md file.
The instruction-only skill depends on an external plugin that is not included in the provided artifacts. The install is user-directed and central to the purpose, so this is a provenance note rather than a concern.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install the plugin only from the trusted ClawHub source and review ClawLink's verification/source information before connecting accounts.
Facebook Page requests, tool calls, and credential handling depend on ClawLink's service boundaries and security controls.
The skill routes Facebook integration setup and tool execution through the ClawLink hub. This external provider flow is disclosed and purpose-aligned, but users should understand that Facebook-related operations are mediated by ClawLink.
Powered by ClawLink, an integration hub for OpenClaw that handles hosted connection flows and credentials
Use ClawLink only if you trust it to handle Facebook OAuth and Page operations; review its documentation and revoke access when no longer needed.