Simplified Social Media
ReviewAudited by ClawScan on May 18, 2026.
Overview
This appears to be a real Simplified social media integration, but it can publish or schedule posts across connected public accounts without a clearly shown final approval step.
Use this skill only if you trust Simplified and are comfortable giving an AI workflow access to create drafts, schedule, or publish social media posts. Before installing, plan to require manual confirmation for every publish/schedule action and keep the Simplified API key protected.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An ambiguous or mistaken request could result in unwanted posts being scheduled or published to one or more public social accounts.
The visible workflow proceeds to a high-impact create/publish action and allows multi-account posting, but the provided artifact excerpt does not show a mandatory final confirmation of accounts, content, timing, and action before the tool call.
Always follow this sequence: Discover → Select → Compose → Publish ... Pick one or more `account_ids` ... You can post to multiple accounts in a single call ... Call `createSocialMediaPost` with the composed payload.
Require explicit user confirmation before every `createSocialMediaPost` call, including exact account IDs, platforms, post text, media, publish action, and scheduled time; prefer draft mode by default for unclear requests.
Anyone or anything with access to this API key may be able to act through the connected Simplified social media workspace, depending on Simplified's permissions.
The API key is purpose-aligned, but it is a privileged credential for a service connected to social media accounts.
"Authorization": "Api-Key ${SIMPLIFIED_API_KEY}" ... Connect your social media accounts in the Simplified dashboardUse a dedicated API key with the minimum needed access, store it securely, rotate it if exposed, and review which social accounts are connected in Simplified.
The user must trust the remote Simplified MCP server to correctly handle credentials, content, analytics data, and posting actions.
The skill is instruction-only and delegates actual behavior to a remote MCP server, so the provided artifacts do not let the scanner inspect the implementation of the high-impact tools.
All tools (`getSocialMediaAccounts`, `createSocialMediaPost`, `getSocialMediaAnalyticsRange`, etc.) are provided by this remote MCP server — they are not built-in tools.
Install only if you trust Simplified and the MCP endpoint, and review Simplified's account permissions, audit logs, and API key controls.
Users may over-trust the agent to run public campaigns without sufficient review of brand, legal, timing, or account-selection consequences.
The skill's user-facing wording encourages autonomous social media campaign execution, which is sensitive because campaigns may publish public content across accounts.
Let your AI agent run full social media campaigns autonomously
Treat autonomous campaign language cautiously and keep human review in the loop for public posts, ads, brand-sensitive content, or multi-platform campaigns.