PageClaw
v1.2.1AI skills for managing Facebook business pages — auto-reply, content posting, bookings, reviews, and lead capture across 9 industries
⭐ 1· 31·0 current·0 all-time
byVik@proship1
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, and required environment variables (PAGECLAW_PAGE_ID, PAGECLAW_PAGE_TOKEN, PAGECLAW_NICHE) directly match the documented use of the Facebook Graph API for page management. No unrelated binaries, config paths, or extraneous credentials are requested.
Instruction Scope
SKILL.md instructs the agent to read page info, conversations, reviews, and insights and to post replies and content via Graph API endpoints — this is expected for a page manager. Note: reading conversations and reviews means the agent will access potentially sensitive customer messages; that is coherent with purpose but is sensitive data the user should consent to and monitor.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk or downloaded during install, which reduces risk.
Credentials
The skill asks only for a Page ID, a Page access token (primary credential), and a niche value — these are proportionate. Operational note: PAGECLAW_PAGE_TOKEN is powerful (grants page-level actions); users should ensure the token has minimal required scopes, is stored securely, and rotated if compromised.
Persistence & Privilege
always is false and there is no install-time service or modifications to other skills or system-wide settings. The skill can be invoked autonomously by the agent only under the platform's normal rules, which is expected for skills.
Assessment
This skill appears coherent, but be cautious because it will access and act on your Facebook Page data. Before installing: (1) verify pageclaw.onechat.ai and OneChat.ai reputation/privacy policy and confirm you trust the service that issued the token; (2) create and supply a Page access token with the minimum scopes required and prefer short-lived tokens where possible; (3) do initial testing on a non-production/test page to confirm behavior; (4) understand the agent will read conversations and reviews — ensure you have consent to expose customer messages; (5) store the token securely (do not paste into public places) and be prepared to rotate it if anything looks wrong; (6) monitor activity/logs and require confirmation before publishing posts (the skill's rules already advise this). If you need higher assurance, ask the vendor for details on where tokens are stored/used and for an auditable privacy/security statement.Like a lobster shell, security has layers — review code before you run it.
latestvk9702f50j5fsf0fmyde0sjcf1d8464pk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvPAGECLAW_PAGE_ID, PAGECLAW_PAGE_TOKEN, PAGECLAW_NICHE
Primary envPAGECLAW_PAGE_TOKEN
