X Actionbook Recap

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent for making X recaps, but it includes browser automation and public posting steps that users should explicitly approve.

Before installing or using this skill, make sure you trust the local Actionbook/browser automation setup and require the agent to show you the target X account, exact final text, and any image before posting. The collection workflow appears limited to public X content and the artifacts do not show hidden code or data exfiltration.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

If approved, the agent could publish a post or thread to X from the selected account.

Why it was flagged

The skill can use browser automation to perform an external public posting action. The explicit confirmation requirement makes this purpose-aligned and user-controlled rather than hidden.

Skill content

If using OpenClaw browser automation:
- open compose
- paste final English copy
- upload image (if any)
- post / thread

Confirm before posting:

Recommendation

Confirm the target account, final text, and any image before allowing the agent to post.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

The agent may act through whichever X account is active or specified for publishing.

Why it was flagged

Publishing from a specified account uses that account's authority. This is expected for the stated purpose, but it is still account-level action.

Skill content

publish a neutral English recap (single post or thread) from a specified account

Recommendation

Use only the intended logged-in account and require explicit approval for the exact post or thread.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users need a trusted local Actionbook installation for the workflow to work safely.

Why it was flagged

The workflow depends on an external Actionbook CLI, while the package itself is instruction-only and has no install spec. This is a metadata/provenance gap for the external tool, not evidence of hidden code in the skill.

Skill content

using the Actionbook Rust CLI (actionbook-rs) workflow ... `actionbook browser open`

Recommendation

Verify the Actionbook CLI source and installation separately before using the skill.