ClawHub

agnt-data

v1.0.13

Unified social data API for AI agents. One API key for LinkedIn, YouTube, TikTok, X, Instagram, Reddit, and Facebook.

⭐ 1· 136·0 current·0 all-time
byJaen@jaencarrodine
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires OAuth tokenRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (unified social data API) matches the requirements and instructions: the skill only requires curl and AGNTDATA_API_KEY and describes calling agntdata.dev endpoints for many platforms. There are no unrelated credentials, binaries, or install steps.
ℹ
Instruction Scope
SKILL.md instructs the agent to call public and authenticated agntdata API endpoints using curl and to register/activate keys. It also documents a webhook/ingest feature that captures raw POST bodies, headers and source IPs and exposes an ingest URL whose endpoint id is the secret. That webhook model (URL-as-secret, no signature) is a security/privacy consideration but is coherent with a hosted receiver design. Instructions do not request unrelated local files or extra credentials.
✓
Install Mechanism
No install spec or code files — instruction-only skill. No downloads or archives, so there is nothing being written or executed on disk by the skill itself.
✓
Credentials
Only AGNTDATA_API_KEY is required (declared as primaryEnv). This single credential is appropriate for a service that centralizes access to multiple social platforms; no unrelated secrets or config paths are requested.
✓
Persistence & Privilege
Skill does not request always:true and does not modify other skills or system config. It runs as an ordinary instruction-only skill and relies on the external API for persistence (deliveries, endpoints) on the provider side.
Assessment
This skill appears to be what it says: a curl-based client for a single third‑party social-data API. Before installing or using it, consider the following: (1) Trust: you are sending queries (and API key) to agntdata.dev — verify the provider's reputation, privacy policy, and data retention rules. (2) Credential handling: keep AGNTDATA_API_KEY secret (do not paste into public chats) and rotate it if exposed. (3) Webhooks: the webhook/ingest design uses the URL (endpoint id) as the secret and captures raw bodies, headers, and source IPs with no signature verification — treat ingest URLs like credentials and avoid exposing them. (4) Legal/TOU: ensure using aggregated social data from this provider complies with the platforms' terms and any applicable laws. (5) If you need lower blast radius, prefer limiting the skill to only the platforms you actually need and monitor usage in the provider dashboard. If you want stronger guarantees about how the agent authenticates or handles interactive logins, consider the plugin path the SKILL.md recommends and review that plugin's install sources before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fy10sd2y768pfb766xzhths84z14q

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

⚡ Clawdis
Binscurl
EnvAGNTDATA_API_KEY
Primary envAGNTDATA_API_KEY

Comments