Social Media Manager

PassAudited by ClawScan on May 1, 2026.

Overview

The artifacts describe a local social-media drafting and planning assistant, with no evidence of credential use, account posting, background activity, or data exfiltration.

This looks safe to install for drafting posts, planning calendars, and generating hashtags. Review generated content before posting publicly, and confirm any helper-script output paths if you choose to export files.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the agent uses the helper scripts, local Python execution may be involved even though the registry requirements do not call out a Python runtime.

Why it was flagged

The package includes executable Python helper scripts even though the registry metadata lists no install spec or required binaries. The provided script uses standard-library imports and is aligned with calendar planning, so this is a disclosure/metadata note rather than a concern.

Skill content
#!/usr/bin/env python3
Usage:
    python calendar_planner.py --month 2026-03
Recommendation

Use the scripts only for requested content, hashtag, or calendar tasks, and publishers should declare the Python helper requirement in metadata for clarity.

What this means

A chosen output path could create or replace a local file with generated calendar data.

Why it was flagged

The calendar helper can write generated JSON to a user-selected path. This is expected for exporting a content calendar, but it can overwrite a file if invoked with an existing path.

Skill content
parser.add_argument("--output", "-o", help="Output JSON file") ... with open(args.output, "w") as f:
Recommendation

Confirm output filenames before running helper scripts, and avoid pointing them at important files or protected directories.