Security audit
Postiz Social Publishing
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed Postiz social publishing skill that uses ClawLink for account connection and requires confirmation before write actions.
Install only if you trust ClawLink to broker access to your Postiz account. Review the account connection prompt carefully, and confirm any scheduling, publishing, editing, or deletion request only after the preview matches what you intend to happen on your social accounts.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
61/61 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.