Social Media Manager
PassAudited by ClawScan on May 1, 2026.
Overview
The artifacts describe a local social-media drafting and planning assistant, with no evidence of credential use, account posting, background activity, or data exfiltration.
This looks safe to install for drafting posts, planning calendars, and generating hashtags. Review generated content before posting publicly, and confirm any helper-script output paths if you choose to export files.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the agent uses the helper scripts, local Python execution may be involved even though the registry requirements do not call out a Python runtime.
The package includes executable Python helper scripts even though the registry metadata lists no install spec or required binaries. The provided script uses standard-library imports and is aligned with calendar planning, so this is a disclosure/metadata note rather than a concern.
#!/usr/bin/env python3
Usage:
python calendar_planner.py --month 2026-03Use the scripts only for requested content, hashtag, or calendar tasks, and publishers should declare the Python helper requirement in metadata for clarity.
A chosen output path could create or replace a local file with generated calendar data.
The calendar helper can write generated JSON to a user-selected path. This is expected for exporting a content calendar, but it can overwrite a file if invoked with an existing path.
parser.add_argument("--output", "-o", help="Output JSON file") ... with open(args.output, "w") as f:Confirm output filenames before running helper scripts, and avoid pointing them at important files or protected directories.
