Social Auto Poster

• Outcome: Review
• Latest audit: May 29, 2026, 9:29 PM
• Version:
  1.1.0

Overview

This is a transparent social-posting skill, but it gives an agent standing ability to publish publicly from logged-in accounts and WordPress without enough approval and credential-safety guardrails.

Install only if you are comfortable letting the agent publish from your logged-in social accounts and configured WordPress site. Before use, inspect the external image script, protect the WordPress env file with restrictive permissions, use a least-privilege application password, know how to revoke it, and require the agent to show the exact text, image paths, target accounts, and destination URLs before each final post or publish action.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill instructs storing a long-lived WordPress application password in a plaintext local .env file under a predictable path, without file-permission guidance or secret-handling warnings. If the host is multi-user, backed up, synced, or otherwise exposed, those credentials can be reused to publish, modify, or deface site content via the WordPress API.

Session Persistence

Medium

• Category: Rogue Agent

Content

WordPress uses REST API with Application Password — no browser needed.

Create a credentials file at `~/.openclaw/.wp-[yoursite].env`:

```bash
WP_URL=https://yoursite.com

• Confidence: 90% confidence
• Finding: Create a credentials file at `~/.openclaw

VirusTotal

62/62 vendors flagged this skill as clean.